EIP-2026-107898

The exploit demonstrates a SQL injection vulnerability in the 'id' parameter of form.php, allowing an attacker to extract database information such as version, user, and database name. The payload includes a UNION-based SQLi technique to bypass restrictions and retrieve sensitive data.