EIP-2026-109535

This exploit demonstrates an SQL injection vulnerability in MOD Guthabenhack for Woltlab Burning Board, allowing an attacker to bypass authentication by manipulating the 'geworbenv' form field. The provided JavaScript snippet injects a payload to alter the 'groupid' parameter, potentially elevating privileges.