CVE-2005-1804

This exploit demonstrates a SQL injection vulnerability in NPDS by injecting a malicious query into the 'terme' parameter, allowing an attacker to extract usernames and passwords from the 'users' table. The vulnerability arises due to insufficient input validation in the 'glossaire' module.

This exploit demonstrates a SQL injection vulnerability in NPDS, allowing an attacker to extract user credentials (uname, pass) from the database and write them to a file on the server. The attack leverages a UNION-based SQL injection with INTO OUTFILE to exfiltrate data.