EIP-2026-107936

This exploit targets a SQL injection vulnerability in Invision Power Board's Currency Mod, allowing an authenticated user with currency edit access to elevate their privileges to admin by manipulating the 'mgroup' field in the database.