EIP-2026-106326

This exploit demonstrates a SQL injection vulnerability in Cythosia Botnet's 'socks5.php' file, allowing an attacker to extract MySQL version and user information via crafted POST requests. The vulnerability arises from unsanitized user input in the 'hwid' parameter.