CVE-2006-0757

This exploit demonstrates a SQL injection vulnerability in HiveMail, allowing arbitrary PHP code execution via unsanitized input in the 'folderid' parameter. The provided URL injects PHP code to execute 'phpinfo()' as a proof of concept.

This exploit demonstrates multiple vulnerabilities in HiveMail, including PHP code execution, XSS, and SQL injection. The provided URL manipulates input to execute arbitrary PHP code via the `cmd` parameter.

This Perl script exploits a command injection vulnerability in HiveMail <= 1.3 by injecting arbitrary commands via the 'com' parameter in the addressbook.add.php endpoint. It requires a valid session ID and constructs a malicious HTTP request to execute system commands on the target server.