EIP-2026-107381

The exploit demonstrates a SQL injection vulnerability in GENU CMS's read.php file, where the article_id parameter is directly interpolated into a SQL query without sanitization. The PoC uses a UNION-based attack to extract user credentials from the genu_users table.