EIP-2026-109597

This exploit demonstrates an unauthenticated SQL injection to remote code execution (RCE) in Movie Rating System 1.0 by leveraging SQLi to write a PHP shell to the server. It requires the database user to have administrative privileges for successful exploitation.