EIP-2026-105010

This exploit demonstrates a SQL injection vulnerability in Affiliate Directory, allowing an attacker to retrieve admin credentials via a crafted UNION-based SQL query. The payload extracts usernames and passwords in plaintext from the 'admin' table.