EIP-2026-109362

This exploit demonstrates a SQL injection vulnerability in MaxOn ERP Software versions 8.x-9.x. The vulnerability exists in the 'log_activity' function where user input is directly concatenated into SQL queries without proper sanitization.