CVE-2008-5955

The exploit demonstrates a SQL injection vulnerability in Wbstreet v1.0 via the 'id' parameter in show.php. It includes a crafted URL to extract user credentials from the MySQL database.

This exploit demonstrates an SQL injection vulnerability in PHPSTREET Webboard by injecting a UNION-based SQL query to extract user credentials from the MySQL user table. The payload bypasses sanitization by using comment-based obfuscation.