CVE-2007-4210

This exploit demonstrates SQL injection vulnerabilities in la-nai CMS v1.2.14, specifically in the FAQ, EZSHOPINGCART, and GALLERY modules. It bypasses authentication by injecting SQL queries to extract user credentials from the database.

This exploit demonstrates a SQL injection vulnerability in LANAI CMS by manipulating the 'gid' parameter in a URL to extract user credentials from the database. The payload uses UNION-based SQLi to retrieve data from the 'tbl_ln_user' table.

This exploit demonstrates a SQL injection vulnerability in LANAI CMS by injecting a UNION-based SQL query to extract user credentials from the database. The PoC manipulates the 'mid' parameter in the URL to bypass authentication and retrieve sensitive data.

This exploit demonstrates a SQL injection vulnerability in LANAI CMS by manipulating the 'cid' parameter in a URL to extract user credentials via a UNION-based attack. The payload bypasses authentication and retrieves login-password pairs from the database.