EIP-2026-106232

This exploit demonstrates a SQL injection vulnerability in Craigs CMS 1.0.2 via the 'users' parameter in profile_detail.php. The payload extracts table names from the database using a UNION-based attack.