EIP-2026-109682

The exploit demonstrates SQL injection vulnerabilities in MyBB's managegroup.php by manipulating the 'gid' and 'request[sql]' parameters. It allows an attacker to bypass authentication and execute arbitrary SQL queries.