EIP-2026-104895

This PHP script exploits an information disclosure vulnerability in Academic Timetable Final Build 7.0a-7.0b by sending a crafted request to 'server_user.php' to retrieve user data, including hashed passwords, without authentication.