EIP-2026-104726

The exploit describes a SQL injection vulnerability in Flashcard Quiz App v1.0, where the 'card' parameter in the URL is directly concatenated into a SQL query without sanitization. The PoC demonstrates a time-based blind SQL injection payload to verify the vulnerability.