CVE-2008-1425

This Perl script exploits a SQL injection vulnerability in Easy-Clanpage <= v2.1 by injecting a UNION-based query to extract user credentials (password hashes) from the `ecp_user` table. The exploit constructs a malicious URL and uses LWP::Simple to fetch the response, parsing the password hash from the output.

This exploit demonstrates a SQL injection vulnerability in Easy-Clanpage v2.2's gallery module. The PoC provides a crafted URL that extracts user credentials from the database via a UNION-based SQL injection.