CVE-2008-2789

This Metasploit module exploits a buffer overflow in xRadio 0.95b via a crafted .xrl file, leveraging SEH overwrite and an egghunter for reliable payload execution. The exploit targets a universal Windows vulnerability with a known return address.

This exploit demonstrates a SQL injection vulnerability in BaSiC-CMS via the 'page_id' parameter in index.php. The PoC uses a UNION-based SQLi to extract database version, current user, and database name.