EIP-2026-105300

The exploit demonstrates an SQL injection vulnerability in auraCMS by injecting a malicious SQL query via the 'id' parameter in the URL. This allows an attacker to extract sensitive data such as passwords and usernames from the 'user' table.