EIP-2026-107962

This document details a SQL injection vulnerability in iScripts MultiCart 2.2, where the application's filter for SQL keywords (UNION, SELECT) can be bypassed using C-like comments. The analysis includes the vulnerable code snippet and a proof-of-concept example.