EIP-2026-105847

The exploit demonstrates a SQL injection vulnerability in ChurchCRM v4.5.3-121fcc1 via the `EID` parameter, allowing boolean-based blind, time-based blind, and UNION-based attacks without authentication. The payloads include techniques to exfiltrate data and execute arbitrary SQL queries.