EIP-2026-100814

The exploit demonstrates an SQL injection vulnerability in Hot Links SQL 3.2.0 by injecting a malicious SQL query via the 'id' parameter in the 'report.cgi' endpoint. The payload '999; or 'a'='a' bypasses authentication and manipulates the SQL query.