EIP-2026-110483

This exploit demonstrates a SQL injection vulnerability in Parnian Opendata CMS, allowing an attacker to extract user credentials (email, password, and level) via a crafted UNION-based SQL query. The exploit targets the 'id' parameter in the 'mpfn=pdview' endpoint.