EIP-2026-109520

This PHP script exploits an SQL injection vulnerability in Mnews <= 1.1 by injecting malicious SQL queries via the 'id' parameter in view.php. It extracts MySQL user credentials and version information, as well as admin login details from the database.