EIP-2026-109581

This exploit demonstrates a second-order SQL injection vulnerability in Moodle 3.11.5. It uses sqlmap with a custom tamper script to authenticate, inject payloads, and trigger execution by enabling a badge.