EIP-2026-107490

The exploit demonstrates an SQL injection vulnerability in GC Auction Platinum by injecting a UNION-based query to extract admin credentials (username and password) from the database. The payload is appended to the 'cate_id' parameter in the URL, leveraging improper input sanitization.