EIP-2026-104834

The exploit describes an SQL injection vulnerability in 360 Web Manager 3.0 due to insufficient sanitization of user-supplied data in the 'IDFM' parameter. The provided URL demonstrates how an attacker can inject arbitrary SQL commands.