EIP-2026-106623

This is a writeup describing an SQL injection vulnerability in E-commerce Group's cat.php. It provides a basic example of exploiting the vulnerability to leak password data from the user table.