EIP-2026-110189

This exploit demonstrates a SQL injection vulnerability in Online Test Script 2.0.7 via the 'cid' parameter in the login.php file. The payload uses a UNION-based query to extract database information, including version, user, and table/column names.