EIP-2026-105965

This PHP script exploits an SQL injection vulnerability in CMS Easyway by manipulating the 'mid' parameter to extract user credentials (login and password hashes) from the database. It automates the process of determining the number of columns and then performs a UNION-based SQL injection to retrieve the data.