EIP-2026-100311

This exploit demonstrates a SQL injection vulnerability in Espinas CMS, allowing an attacker to extract user credentials (username and password) from the 'sinabed_users' table via a crafted UNION-based SQL query.