EIP-2026-105690

This exploit demonstrates a SQL injection vulnerability in Calendar Express 2.0 via the 'catid' parameter in year.php. The payload extracts database information including user, version, and database name using a UNION-based SQLi technique.