EIP-2026-106964

This exploit demonstrates a SQL injection vulnerability in Exponent CMS 0.96.3 via the 'id' parameter in the articlemodule. The PoC uses a UNION-based SQLi to extract usernames and passwords from the exponent_user table.