EIP-2026-106664

This exploit demonstrates a SQL injection vulnerability in the Advanced Medal System plugin for e107 CMS. The vulnerability arises from improper sanitization of user input in the 'sub_action' parameter, allowing arbitrary SQL queries to be executed.