Create exploit for CVE-2014-8499 - PMP privesc + password disclosure

This is an exploit for an authenticated SQL injection in Password Manager Pro 6.8 to 7.1 build 7105. 
It allows a low privileged user (like a guest) to escalate privileges to "super administrator" and dump all the passwords in the system in cleartext. 
This module has been well tested in Windows and Linux with several versions between 6.8 and 7.1.
Just confirming, but you are sending a POST here with vars_get?  Is it really supposed to be a POST?