CVE-2025-52970 PoC — Fortinet FortiWeb 安全漏洞

Source

https://github.com/imbas007/POC-CVE-2025-52970

Associated Vulnerability

Title:Fortinet FortiWeb 安全漏洞 (CVE-2025-52970)
Description:A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.

Readme

# POC-CVE-2025-52970

```
python POC-CVE-2025-52970.py -h           
usage: POC-CVE-2025-52970.py [-h] (-t TARGET | -l LIST)

options:
  -h, --help           show this help message and exit
  -t, --target TARGET  Single target URL (e.g., https://xx.xx.xx.xx)
  -l, --list LIST      Path to file containing target URLs, one per line

```

# run poc script

```

python CVE-2025-52970.py -t https://192.168.100.102

```
<img width="1298" height="1150" alt="image" src="https://github.com/user-attachments/assets/f915bea0-2969-4748-9213-9d15d8d5227e" />

File Snapshot


 [4.0K]  /data/pocs/599456d3f62c35f3e4583ba33657b94e395672b8
├── [6.1K]  POC-CVE-2025-52970.py
└── [ 551]  README.md

1 directory, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!