EIP-2026-104399

This document details a SQL injection vulnerability in Pimcore CMS versions 3.0 and 2.3.0, specifically in the backup/mysql module via the 'name' parameter. It includes a proof-of-concept URL demonstrating the injection and error logs confirming the vulnerability.