CVE-2008-4900

This exploit demonstrates a remote SQL injection vulnerability in Classifieds Blaster by injecting a UNION-based SQL query to extract admin credentials (username and password) from the 'adminsettings' table. The payload is appended to the 'id' parameter in the URL, leveraging the application's failure to sanitize user input.

This exploit demonstrates a SQL injection vulnerability in Banner Management script via the 'id' parameter in 'tr.php'. The payload uses a UNION-based SQLi to extract database information including user, version, and database name.