EIP-2026-106760

The exploit describes a SQL injection vulnerability in the 'prodid' parameter of productdtl.php in ECommerceMajor. The vulnerable code snippet shows improper sanitization of user input, allowing arbitrary SQL queries. The PoC demonstrates the vulnerability but lacks functional exploit code.