CVE-2006-5236

This is a writeup describing a SQL injection vulnerability in 4images 1.7.1, allowing an attacker to extract admin credentials via union-based SQLi. The exploit involves retrieving the admin username and then the password hash.

This exploit targets a SQL injection vulnerability in 4images 1.7.x via the 'search_user' parameter in search.php. It allows an attacker to extract user passwords (hashed) from the database by manipulating the SQL query through URL encoding.