EIP-2026-109359

This exploit demonstrates an SQL injection vulnerability in MAXdev My eGallery module for Xoops. The vulnerability allows an attacker to extract sensitive user data (usernames and passwords) from the database by manipulating the 'gid' parameter in the URL.