CVE-2009-0534

This exploit demonstrates a SQL injection vulnerability in FlexCMS, allowing an attacker to extract user credentials via a crafted UNION-based SQL query. The PoC includes a live demo URL and targets the 'catId' parameter in the webshop module.

This is a technical writeup detailing a blind SQL injection vulnerability in FlexCMS via the 'ItemId' parameter. It includes example payloads and live demo URLs to demonstrate the vulnerability.