CVE-2006-4612

This Perl script exploits a SQL injection vulnerability in ZIXForum <= v1.12 by injecting malicious SQL queries into the 'RepId' parameter to extract admin credentials from the 'adminlogins' table. It sends two HTTP requests to retrieve the username and password separately.

This exploit demonstrates a SQL injection vulnerability in ZIXForum 1.12 by manipulating the 'RepId' parameter to extract admin credentials. The PoC provides direct URLs to retrieve usernames and passwords from the 'adminlogins' table.