CVE-2008-5051

This exploit demonstrates a SQL injection vulnerability in the Joomla component com_jb2 via the PostID parameter. The provided payload extracts user credentials from the jos_users table by leveraging a UNION-based SQL injection technique.

This exploit is a Perl script that performs a blind SQL injection attack against the Joomla JooBlog component (CVE-2008-5051). It brute-forces the MD5 hash of the admin password by leveraging a time-based or boolean-based SQL injection vulnerability in the 'CategoryID' parameter.