EIP-2026-105271

The exploit demonstrates a SQL injection vulnerability in the 'content_by_cat.asp' page, allowing an attacker to extract user credentials (password, accesslevel, user_name) from the database via UNION-based SQLi. The payloads manipulate the 'contentid' and 'catid' parameters to bypass authentication and dump sensitive data.