CVE-2006-4300

This exploit targets a SQL injection vulnerability in SimpleBlog 2.0 via the 'id' parameter in comments.asp. It extracts admin credentials (username, password, email) by injecting a UNION-based SQL query.

This exploit demonstrates a SQL injection vulnerability in SimpleBlog 2.0 via the 'comments.asp' page. It allows an attacker to extract user credentials from the database by manipulating the 'id' parameter in a UNION-based SQL injection attack.