EIP-2026-107929

The provided text describes an SQL injection vulnerability in Invision Power Board 2.0.1, where user-supplied input is not properly sanitized in the 'qpid' parameter. The exploit example demonstrates how an attacker could inject malicious SQL code via the URL.