EIP-2026-100384

This exploit demonstrates an SQL injection vulnerability in K Web CMS by injecting a UNION-based query to extract admin credentials (username and password) from the database. The vulnerability arises from insufficient sanitization of the 'id' parameter in the 'sayfala.asp' page.