EIP-2026-105089

This exploit demonstrates unauthenticated SQL injection in AlienVault 4.3.1 via multiple parameters in 'graph_geoloc.php' and 'radar-iso27001-A11AccessControl-pot.php'. It includes proof-of-concept URLs for time-based, error-based, and XSS attacks, leveraging MySQL root privileges to extract credentials and system information.