CVE-2011-0645

This exploit demonstrates a remote SQL injection vulnerability in Phpcms 2008 V2 via the 'modelid' parameter in 'flash_upload.php'. The PoC includes a basic SQLi test using 'order by' to confirm the vulnerability.

This exploit demonstrates an SQL injection vulnerability in PHPCMS 2008 V2 by injecting a UNION-based query to extract database information. The PoC leverages unsanitized input in the 'where_time' parameter to execute arbitrary SQL commands.