EIP-2026-105896

This exploit demonstrates an SQL injection vulnerability in Vacation Packages by injecting a single quote into the 'season' parameter. The lack of input sanitization allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.