EIP-2026-100413

This exploit demonstrates an SQL injection vulnerability in Mavi Emlak by injecting a UNION-based query to extract usernames and passwords from the 'Danismanlar' table. The vulnerability arises from insufficient input sanitization in the 'haberNo' parameter.