CVE-2008-5289

This is a writeup detailing blind SQL injection and XSS vulnerabilities in Clean CMS 1.5. It provides example URLs demonstrating the vulnerabilities but does not include executable exploit code.

This exploit demonstrates a blind SQL injection vulnerability in Clean CMS 1.5 via the 'id' parameter in full_txt.php. It uses multi-threading to brute-force character extraction from the admin credentials stored in the database.