EIP-2026-107978

This is a SQL injection exploit targeting a vulnerable 'cat' parameter in a PHP application. It extracts user credentials from the 'itaf_user' table via a UNION-based attack.