关联漏洞
标题：
XWiki Platform SQL注入漏洞
(CVE-2025-32429)
描述：XWiki Platform是XWiki开源的一套用于创建Web协作应用程序的Wiki平台。 XWiki Platform 9.4-rc-1至16.10.5版本和17.0.0-rc-1至17.2.2版本存在SQL注入漏洞，该漏洞源于getdeleteddocuments.vm中参数sort的错误操作导致SQL注入。
描述
Proof-of-Concept exploit for CVE-2025-32429 (SQL Injection in PHP PDO prepared statements) – for educational and security research purposes only
介绍
# CVE-2025-32429 – SQL Injection in PHP PDO Prepared Statements
This repository contains a proof-of-concept exploit for **CVE-2025-32429**,
a vulnerability affecting PHP PDO prepared statements when emulation is enabled.
## 📄 References
- Original research by Assetnote:
https://slcyber.io/assetnote-security-research-center/a-novel-technique-for-sql-injection-in-pdos-prepared-statements
- NVD Entry:
https://nvd.nist.gov/vuln/detail/CVE-2025-32429
## ⚠ Disclaimer
This code is for **educational and security research purposes only.**
Do **NOT** use it against systems you do not own or have explicit permission to test.
The author is **not responsible for misuse of this code.**
## 🛠 Usage
```bash
gcc exploit.c -o exploit -lcurl
./exploit -u http://target.com
```
Original PoC by Byte Reaper https://github.com/byteReaper77/CVE-2025-32429
文件快照
[4.0K] /data/pocs/99f60511d279f14327f72517f01835b27a74110d
├── [ 27K] exploit.c
└── [ 870] README.md
0 directories, 2 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。