Wuzhicms Server-Side Request Forgery Vulnerability in Config.php

A server-side request forgery (SSRF) vulnerability has been identified in Wuzhicms version 4.1.0. The issue arises in the 'test' function of 'coreframe/app/search/admin/config.php', where the 'sphinxhost' and 'sphinxport' parameters are not properly validated. This lack of input filtering allows attackers to probe internal network ports, potentially leading to unauthorized access or information disclosure.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services or resources that are not exposed to the public.

Reproduction

To reproduce this vulnerability, send a request to 'index.php' with the 'm', 'f', 'v', 'sphinxhost', and 'sphinxport' parameters. The 'sphinxhost' parameter can be set to '127.0.0.1' to check if local ports are open. If the specified port is open, the server will respond affirmatively, indicating that the port can be accessed.