$ 0 0 Coppermine 1.4.9 suffers from a SQL injection vulnerability. POC included that grabs the admin hash.