CVE-2007-3088

This exploit targets a SQL injection vulnerability in ComicSense 0.2 by injecting a UNION-based query to retrieve admin credentials. It uses LWP::UserAgent to send a crafted HTTP request and extracts the username and password hash from the response.

This exploit demonstrates a SQL injection vulnerability in ComicSense's index.php, allowing an attacker to extract admin credentials, password hashes, and email addresses via UNION-based SQLi.