EIP-2026-107712

This exploit demonstrates an SQL injection vulnerability in ibProArcade 2.5.9+ by injecting a UNION-based query to extract user passwords from the database. The attack leverages unsanitized input in the 'gsearch' parameter to manipulate the SQL query.