EIP-2026-107903

This is a writeup describing an SQL injection vulnerability in Invision Board's functions.php script. The provided URI demonstrates how an attacker can manipulate the 'skinid' parameter to execute malicious SQL queries, potentially leading to information disclosure or database corruption.