EIP-2026-110444

This exploit demonstrates an SQL injection vulnerability in PACSOne Server 6.6.2's DICOM Web Viewer. The 'username' and 'email' parameters in the POST request to '/pacs/userSignup.php' are vulnerable, allowing unauthenticated remote attackers to execute arbitrary SQL commands.