CVE-2006-4202

This exploit leverages a SQL injection vulnerability in Spidey Blog Script v1.5 to extract administrator credentials (username or MD5 password hash) via a crafted UNION-based query. It uses LWP::Simple to fetch the target page and parse the response.

This exploit demonstrates SQL injection in Spidey Blog Script version 1.5 (tr) by extracting admin credentials via UNION-based SQLi in the 'pid' parameter.