CVE-2012-5292

This exploit demonstrates a SQL injection vulnerability in Atar2b CMS by manipulating the 'id' parameter in a URL to inject SQL commands. The 'order by' technique is used to confirm the vulnerability and potentially extract data.

The provided text describes a SQL injection vulnerability in Atar2b CMS 4.0.1, where user-supplied input is not properly sanitized before being used in SQL queries. The example URL demonstrates a basic SQLi payload but lacks executable exploit code.

This exploit demonstrates SQL injection in Atar2b CMS by manipulating the 'id' parameter in the gallery_e.php endpoint. The payload uses 'order by' to confirm vulnerability, allowing potential data access or manipulation.