EIP-2026-109749

The exploit demonstrates an SQL injection vulnerability in MyBulletinBoard (MyBB) by injecting malicious input into the 'action' parameter of usercp.php. The payload manipulates the 'additionalgroups' parameter to potentially elevate privileges or access unauthorized data.