EIP-2026-100362

The exploit demonstrates an SQL injection vulnerability in PortalApp by injecting a UNION-based query to extract user credentials from the 'Users' table. The payload bypasses input sanitization by appending malicious SQL to the 'CatId' parameter.