EIP-2026-107416

This is a SQL injection exploit targeting GIU Gallery Image Upload 0.3.1 via the 'category' parameter. The PoC demonstrates a UNION-based SQLi to extract user credentials (username and password) from the database.