CVE-2010-3029

This exploit demonstrates a SQL injection vulnerability in PHPKick v0.8's statistics.php, allowing an attacker to extract user credentials (username and password hash) via a crafted UNION-based SQL query. The exploit bypasses common PHP security settings like magic_quotes and register_globals.