EIP-2026-107343

This exploit demonstrates a SQL injection vulnerability in Gaming Directory 1.0, allowing an attacker to read arbitrary files from the server using MySQL's `load_file` function. The provided URL manipulates the `cat_id` parameter to inject a UNION-based SQL query that attempts to read `/etc/passwd`.