CVE-2009-4561

This exploit demonstrates an SQL injection vulnerability in WebLeague 2.2.0, allowing an attacker to bypass admin authentication by injecting malicious SQL syntax into the username and password fields. The PoC sends a crafted POST request to the admin login page, exploiting the lack of input sanitization.