EIP-2026-105040

This exploit demonstrates a SQL injection vulnerability in AJ Auction OOPD V.1, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to concatenate and retrieve username and password from the admin_users table.