EIP-2026-110479

This exploit demonstrates a SQL injection vulnerability in Park Ticketing Management System 1.0, allowing an attacker to write a PHP web shell to the server via a crafted UNION-based SQL query. The script then executes arbitrary commands through the uploaded shell.