EIP-2026-107569

This exploit demonstrates a SQL injection vulnerability in Heaven Soft CMS v4.7 via the 'cid' parameter in photogallery_open.php. The PoC uses a UNION-based SQLi to extract user credentials from the 'user_profile' table.