EIP-2026-106777

The exploit demonstrates SQL injection vulnerabilities in EduSec 4.2.5 via the 'id' GET parameter, allowing arbitrary SQL code execution. The PoC includes a crafted URL that extracts the contents of '/etc/passwd' using a UNION-based SQL injection technique.