CVE-2006-0074

This Perl script exploits a SQL injection vulnerability in Phpenpals <= 1.1, allowing an attacker to retrieve the admin password or read arbitrary files from the server. It uses union-based SQL injection to extract data via the 'mail.php' endpoint.

This exploit demonstrates an SQL injection vulnerability in Jevontech PHPenpals by injecting a UNION-based query to retrieve the admin password from the database. The attack leverages unsanitized input in the 'personalID' parameter.