CVE-2008-6795

This exploit demonstrates a SQL injection vulnerability in Vibro-School CMS via the 'nID' parameter in view_news.php. The PoC uses a UNION-based SQLi to extract database version information.

This exploit demonstrates SQL injection vulnerabilities in Vibro-CMS by injecting malicious SQL queries into URL parameters. It extracts database information such as user, version, and database name without requiring authentication.