EIP-2026-105389

This exploit demonstrates a SQL injection vulnerability in Banner Ad Management Script via the 'size_id' parameter in 'image.php'. The PoC shows how an attacker can inject a UNION-based SQL query to extract database information, such as the MySQL version.