EIP-2026-106126

This exploit demonstrates a SQL injection vulnerability in Concrete5 5.6.2.1, allowing an attacker to extract sensitive data (e.g., usernames and passwords) via a crafted URL. The PoC includes a union-based SQLi payload to dump user credentials into a file.