EIP-2026-105090

This exploit demonstrates an authenticated SQL injection vulnerability in AlienVault 4.5.0, allowing arbitrary file reads via a crafted GET request to the ISO27001Bar1.php endpoint. The Metasploit module automates the attack by leveraging time-based SQL injection to exfiltrate file contents.