EIP-2026-105031

This exploit demonstrates a SQL injection vulnerability in Air Cargo Management System v1.0 via the `ref_code` parameter. The payload uses MySQL's `load_file` function with a UNC path to trigger an external interaction, confirming the vulnerability.