CVE-2007-4919

This Perl script exploits a SQL injection vulnerability in JBlog 1.0 by injecting a UNION-based payload into the 'id' parameter, extracting admin credentials from the 'auteur' table. It sends a crafted HTTP GET request to retrieve and display the username and password hash.

This exploit demonstrates multiple vulnerabilities in JBlog 1.0, including XSS, cookie manipulation, and privilege escalation. It allows an attacker to create an admin account, manipulate cookies, and execute arbitrary JavaScript.