EIP-2026-104725

The writeup describes an SQL injection vulnerability in FAQ Management System v1.0, where the 'faq' parameter in delete-faq.php is directly used in a SQL query without sanitization. It includes a proof-of-concept example demonstrating how an attacker could delete a table via crafted input.