EIP-2026-106726

This is a functional SQL injection exploit targeting the 'forumhost' script, allowing unauthorized extraction of admin credentials via a crafted UNION-based SQL query. The exploit leverages the 'forum' parameter to inject malicious SQL, concatenating username and password fields from the admin table.