CVE-2012-1665

This exploit demonstrates a SQL injection vulnerability in osCMax 2.5.0, allowing an attacker to write arbitrary PHP code to a file via the 'INTO OUTFILE' clause. The PoC shows how an attacker could achieve remote code execution by injecting malicious PHP code into a file on the server.

This exploit demonstrates a SQL injection vulnerability in osCMax 2.5.0 by injecting a malicious payload into the username field of the login form. The payload attempts to extract the database version via a time-based blind SQL injection technique.