EIP-2026-110236

This exploit demonstrates a SQL injection vulnerability in the 'contact_view.php' script of the Open Source Real Estate Script 3.6.0. The PoC shows how an attacker can inject SQL commands to extract admin credentials from the 'admin_login' table.