CVE-2005-4554

This exploit demonstrates a SQL injection vulnerability in Dev Web Management System. The PoC uses a UNION-based SQLi to extract the admin password from the 'variables1' table.

The provided text describes SQL injection and XSS vulnerabilities in Dev Web Management System 1.5 and earlier, with an example URL demonstrating SQL injection via the 'target' parameter. No actual exploit code is present.

This exploit targets a SQL injection vulnerability in Dev <=1.5, specifically in the 'cat' parameter, to disclose the admin MD5 password hash. It bypasses magic_quotes_gpc and includes functionality for proxy support and detailed output formatting.