CVE-2009-3804

This exploit targets a SQL injection vulnerability in RunCms v.2M1's forum module, specifically in the `store()` function. It allows an authenticated attacker to inject malicious SQL queries via the `pid` parameter to extract admin credentials.

This exploit targets an SQL injection vulnerability in RunCMS v2M1, specifically in the '/modules/forum/post.php' file. It allows an attacker to extract admin credentials, hijack sessions, or export a PHP shell under certain conditions.