如何使用python

您好我有這樣的XML，我想獲得與名稱和每個分支元素類型和FullProductName字符串元素（「思科統一計算系統（相關字符串解析有相同的名字元素的XML數據管理軟件）3.0（1）c「）。我試圖用python使用bs4來做到這一點。但我不知道我該怎麼做。如何使用python

XML：

<?xml version="1.0" encoding="UTF-8"?> 
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.icasi.org/CVRF/schema/cvrf/1.1"> 
    <DocumentTitle>Cisco Integrated Management Controller Remote Code Execution Vulnerability</DocumentTitle> 
    <DocumentType>Cisco Security Advisory</DocumentType> 
    <DocumentPublisher Type="Vendor"> 
    <ContactDetails>Emergency Support: 
+1 877 228 7302 (toll-free within North America) 
+1 408 525 6532 (International direct-dial) 
Non-emergency Support: 
Email: [email protected] 
Support requests that are received via e-mail are typically acknowledged within 48 hours.</ContactDetails> 
    <IssuingAuthority>Cisco product security incident response is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks. The on-call Cisco PSIRT works 24x7 with Cisco customers, independent security researchers, consultants, industry organizations, and other vendors to identify possible security issues with Cisco products and networks. 
More information can be found in Cisco Security Vulnerability Policy available at http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html</IssuingAuthority> 
    </DocumentPublisher> 
    <DocumentTracking> 
    <Identification> 
     <ID>cisco-sa-20170419-cimc3</ID> 
    </Identification> 
    <Status>Final</Status> 
    <Version>1.2</Version> 
    <RevisionHistory> 
     <Revision> 
     <Number>1.0</Number> 
     <Date>2017-04-18T16:50:37</Date> 
     <Description>Initial public release.</Description> 
     </Revision> 
     <Revision> 
     <Number>1.1</Number> 
     <Date>2017-05-22T17:55:14</Date> 
     <Description>Updated affected products.</Description> 
     </Revision> 
     <Revision> 
     <Number>1.2</Number> 
     <Date>2017-05-31T20:33:19</Date> 
     <Description>Added vulnerable releases.</Description> 
     </Revision> 
    </RevisionHistory> 
    <InitialReleaseDate>2017-04-19T16:00:00</InitialReleaseDate> 
    <CurrentReleaseDate>2017-05-31T20:33:19</CurrentReleaseDate> 
    <Generator> 
     <Engine>TVCE</Engine> 
    </Generator> 
    </DocumentTracking> 
    <DocumentNotes> 
    <Note Title="Summary" Type="General" Ordinal="1">A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to perform unauthorized remote command execution on the affected device. 

The vulnerability exists because the affected software does not sufficiently sanitize specific values that are received as part of a user-supplied HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. Successful exploitation could allow an unauthenticated attacker to execute system commands with root-level privileges. 

There are no workarounds that address this vulnerability. 

This advisory is available at the following link: 
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3 ["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3"]</Note> 
    <Note Title="CVSS 3.0 Notice" Type="Other" Ordinal="2">Although CVRF version 1.1 does not support CVSS version 3, the CVSS score in this CVRF file is a CVSSv3 base and temporal score, as Cisco is now scoring vulnerabilities in CVSSv3.</Note> 
    </DocumentNotes> 
    <DocumentReferences> 
    <Reference Type="Self"> 
     <URL>https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3</URL> 
     <Description>Cisco Integrated Management Controller Remote Code Execution Vulnerability</Description> 
    </Reference> 
    </DocumentReferences> 
    <ProductTree xmlns="http://www.icasi.org/CVRF/schema/prod/1.1"> 
    <Branch Name="Cisco" Type="Vendor"> 
     <Branch Name="Cisco Unified Computing System (Management Software)" Type="Product Name"> 
     <Branch Name="3.0" Type="Product Version"> 
      <Branch Name="(1)c" Type="Service Pack"> 
      <FullProductName ProductID="CVRFPID-203522">Cisco Unified Computing System (Management Software) 3.0(1)c</FullProductName> 
      </Branch> 
     </Branch> 
     </Branch> 
    </Branch> 
    </ProductTree> 
    <Vulnerability Ordinal="1" xmlns="http://www.icasi.org/CVRF/schema/vuln/1.1"> 
    <Title>Cisco Integrated Management Controller Remote Code Execution Vulnerability</Title> 
    <ID SystemName="Cisco Bug ID">CSCvd14578</ID> 
    <Notes> 
     <Note Title="Summary" Type="Summary" Ordinal="1">A vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to perform unauthorized remote command execution on the affected device. 



The vulnerability exists because the affected software does not sufficiently sanitize specific values that are received as part of a user-supplied HTTP request. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. Successful exploitation could allow an unauthenticated attacker to execute system commands with root-level privileges.</Note> 
     <Note Title="Cisco Bug IDs" Type="Other" Ordinal="3">CSCvd14578</Note> 
    </Notes> 
    <CVE>CVE-2017-6616</CVE> 
    <ProductStatuses> 
     <Status Type="Known Affected"> 
     <ProductID>CVRFPID-203522</ProductID> 
     </Status> 
    </ProductStatuses> 
    <CVSSScoreSets> 
     <ScoreSet> 
     <BaseScore>9.8</BaseScore> 
     <Vector>CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</Vector> 
     </ScoreSet> 
    </CVSSScoreSets> 
    <Remediations> 
     <Remediation Type="Workaround"> 
     <Description>There are no workarounds that address this vulnerability.</Description> 
     </Remediation> 
    </Remediations> 
    <References> 
     <Reference Type="Self"> 
     <URL>https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-cimc3</URL> 
     <Description>Cisco Integrated Management Controller Remote Code Execution Vulnerability</Description> 
     </Reference> 
    </References> 
    </Vulnerability> 
</cvrfdoc>

的Python：

from bs4 import BeautifulSoup 

xmlData = open("test.xml") 
soup = BeautifulSoup(xmlData, "lxml") 
preoductTree = soup.producttree 

vendor = preoductTree.find_all("branch", attrs={"type": "Vendor"})

任何想法？

預先感謝您。

來源

2017-06-04 Joan Triay

所以，你必須先找到標籤，所以我們可以通過文件迭代。我將要使用固有的python xml包。

import xml.etree.ElementTree as ET 
tree = ET.parse('test.xml') 
root = tree.getroot()

然後讓我們找到第一個子標籤，以便我們可以運行該文件。

for child in root: 
    print child.tag, child.attrib 

>>{http://www.icasi.org/CVRF/schema/prod/1.1}Branch, {'Type': 'Vendor', 'Name': 'Cisco'}

因此，您可以看到它不僅僅是您指定的branch。現在

我們可以通過整個文件遞歸運行，並抓住所有這些元素。既然你沒有指定所需的輸出結構，我會把它放在你的字典中。

val_dict = dict() 
for schild in root.iter('{http://www.icasi.org/CVRF/schema/prod/1.1}Branch'): 
     val = schild.attrib 
     val_dict[val.get('Type')] = val.get('Name') 

>>{'Product Name': 'Cisco Unified Computing System (Management Software)', 
'Product Version': '3.0', 
'Service Pack': '(1)c', 
'Vendor': 'Cisco'}

來源

2017-06-04 21:02:04

謝謝你的回答，對不起，但我錯了xml的結構。 –

我覺得是一樣的，你沒有，但accesing到ProductTree爲根，我怎麼沒有我可以訪問ProductTree爲根。 –

編輯，代碼只是稍作修改。如果你瀏覽'xml'文檔，這對你來說是一個快速的解決方案。 –

如何使用python

回答

相關問題