EIP-2026-109718

This exploit demonstrates a SQL injection vulnerability in HM My Country Flags, a MyBB plugin. The PoC shows how to inject a UNION-based SQL query to extract user credentials from the database.