EIP-2026-109056

The exploit demonstrates a SQL injection vulnerability in KwsPHP v1.3.456 by injecting malicious SQL queries via the 'id' parameter in the archives module. It extracts user credentials (pseudo and pass) from the 'users' table using UNION-based SQLi techniques.