CVE-2024-44541

This exploit demonstrates an error-based SQL injection in Inventio Lite 4's login process, extracting administrator credentials via blind SQLi and decrypting the password hash using a dictionary attack.

This repository contains a functional SQL injection exploit for CVE-2024-44541 in Inventio Lite v4, targeting the `/action=processlogin` endpoint via the `username` parameter. The Python script automates authentication bypass and data extraction, including administrator credentials.