EIP-2026-109410

This exploit leverages a SQL injection vulnerability in MemHT Portal <= 4.0.1 to delete all private messages by manipulating the 'deletenewpm' POST parameter. It requires authentication and sends a crafted payload to execute the malicious SQL query.