EIP-2026-109113

This exploit demonstrates an authenticated SQL injection vulnerability in Library System 1.0 via the 'student_id' parameter, allowing command execution via SQLMap's --os-shell feature. The PoC includes payloads for boolean-based blind, error-based, time-based blind, and UNION-based SQLi.