EIP-2026-109731

This is a technical writeup describing a SQL injection vulnerability in the Profile Albums MyBB plugin. The vulnerability exists in the 'albums.php' file due to improper sanitization of the 'album' parameter, allowing attackers to inject malicious SQL queries.