EIP-2026-106100

This exploit demonstrates an SQL injection vulnerability in Comparison Engine Power 1.0, allowing an attacker to extract sensitive user data (id, email, password, nickname) from the database via a crafted UNION-based SQL query.