EIP-2026-109629

This exploit demonstrates a SQL injection vulnerability in Multi Vendor Mall's pages.php script, allowing an attacker to extract user credentials (email and password) from the members_tbl table via a crafted UNION-based SQL query.