EIP-2026-106143

This exploit demonstrates a SQL injection vulnerability in Content Management System 1.0 via the 'id' parameter in a POST request to /ajax.php. It uses sqlmap to extract database information through boolean-based blind, time-based blind, and UNION query techniques.