EIP-2026-105281

The exploit demonstrates SQL injection and XSS vulnerabilities in Atomic Photo Album 1.0.2. The SQLi extracts user credentials via a UNION-based attack, while the XSS executes arbitrary JavaScript through a crafted URL parameter.