EIP-2026-105530

This exploit targets a SQL injection vulnerability in Blogman v0.7.1's profile.php, allowing an attacker to extract user credentials via a UNION-based SQLi attack. The payload injects a crafted query to retrieve UserName and UserPassword from the blogman_user table.