CVE-2009-1613

This exploit demonstrates multiple vulnerabilities in Leap CMS 0.1.4, including SQL injection for authentication bypass, XSS for cookie stealing, and shell upload. The PoC provides clear steps and payloads for each vulnerability.

This Perl script exploits a blind SQL injection vulnerability in Leap CMS 0.1.4 by injecting malicious payloads into the search functionality. It automates the extraction of user data (e.g., email) by brute-forcing character values.