EIP-2026-109045

This exploit demonstrates multiple vulnerabilities in Ktools Photostore <= 4.7.5, including SQL injection via unsanitized parameters (gallerySortType, gallerySortBy) and XSS via mediaID and password parameters. It provides functional payloads for error-based SQLi and XSS attacks.