EIP-2026-106795

This is a writeup describing SQL injection in EgavilanMedia PHPCRUD 1.0 via the 'firstname' parameter. It provides steps to reproduce using Burp Suite and sqlmap but does not include functional exploit code.