EIP-2026-107979

This exploit demonstrates a SQL injection vulnerability in ITaco Group's ITaco.biz software, specifically in the 'view_news.php' file. The exploit uses a UNION-based SQL injection to extract user credentials from the database.