EIP-2026-100397

The provided text describes an SQL injection vulnerability in Lootan, where unsanitized user input in the 'username' parameter of login.asp can be exploited to manipulate SQL queries. No actual exploit code is present, only a description and example URL.