EIP-2026-109131

This exploit demonstrates an SQL injection vulnerability in LightNEasy 3.2.3, allowing an attacker to write a PHP shell to the web server via a malicious UNION SELECT query. The PoC uploads a shell and verifies its presence.