CVE-2007-4956

This exploit targets a SQL injection vulnerability in KwsPHP 1.0's stats module, specifically in the 'typenav' parameter. It performs a UNION-based SQL injection to extract admin credentials from the database when magic_quotes_gpc is disabled.

This exploit targets a SQL injection vulnerability in KwsPHP v1.0's Member_Space module. It authenticates with provided credentials, then injects a malicious SQL query to extract admin credentials from the database.

This exploit targets a SQL injection vulnerability in KwsPHP 1.0's login.php, allowing an attacker to extract admin credentials when magic_quotes_gpc is disabled. It crafts a malicious POST request to dump the password hash from the users table.