EIP-2026-105852

This exploit demonstrates a SQL injection vulnerability in cifshanghai.com's chanpin_info.php script, allowing an attacker to bypass authentication and extract admin credentials via a crafted UNION-based SQL query.