EIP-2026-106233

The exploit demonstrates a SQL injection vulnerability in Craigslist Clone Gold by injecting a UNION-based query to extract email and code from the clf_ads table. The attack is performed via a crafted URL parameter (catid).