EIP-2026-108971

This PHP script exploits a SQL injection vulnerability in Kasseler CMS 1.4.x lite's Jokes module to extract admin credentials. It sends a crafted POST request to dump the username and password hash from the database.