CVE-2008-6011

This PHP script exploits a blind SQL injection vulnerability in SG Real Estate Portal 2.0 by brute-forcing the admin username and password via time-based inference. It uses file_get_contents to measure response lengths and deduce character values.

The exploit demonstrates Local File Inclusion (LFI) and Blind SQL Injection vulnerabilities in SG Real Estate Portal 2.0. It provides multiple PoC URLs with parameter manipulation techniques to exploit these vulnerabilities.