CVE-2006-1708

This exploit demonstrates a SQL injection vulnerability in Clansys 1.1, allowing an attacker to retrieve user credentials (username and base64-encoded password) by manipulating the 'showid' parameter in the 'member.php' file. The exploit constructs a malicious SQL query using a UNION-based injection to extract data from the 'member' table.