This exploit demonstrates SQL injection vulnerabilities in Phpkit 1.6.1 via the `member.php` and `mailer.php` endpoints. The PoC uses UNION-based SQLi to extract user credentials (username and password) from the `phpkit_user` table.
Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:Phpkit 1.6.1
No auth needed
Prerequisites:Access to the target web application