EIP-2026-109628

The exploit demonstrates SQL injection vulnerabilities in Multi Vendor Mall's itemdetail.php and shop.php pages. It includes a UNION-based SQLi payload to extract email and password data from the members_tbl table, and a boolean-based SQLi for shop.php.