CVE-2008-6485

This exploit demonstrates a SQL injection vulnerability in SoftComplex PHP Image Gallery by manipulating the 'ctg' parameter to extract user credentials (login and password) from the database. The payload uses a UNION-based SQL injection to concatenate and display sensitive data.

This exploit demonstrates an authentication bypass and SQL injection vulnerability in Softcomplex PHP Image Gallery v1.0. It provides a simple bypass method using a crafted username ('admin ' or ' 1=1') to gain unauthorized admin access.