CVE-2008-2197

This exploit demonstrates a SQL injection vulnerability in Miniweb 2.0's index.php, specifically in the 'historymonth' parameter. The PoC uses a UNION-based SQLi to extract admin credentials (user_id, username, password) from the 'admin_access' table.

This exploit demonstrates an SQL injection vulnerability in Miniweb 2.0, allowing an attacker to bypass authentication by injecting 'union select 1#' into the username field, effectively granting admin access.