EIP-2026-110486

This exploit demonstrates an SQL injection vulnerability in Parsi PHP CMS 2.0.0 by injecting a UNION-based query to extract user credentials from the database. The PoC constructs a malicious URL that retrieves usernames and passwords from the `parsiphp_user` table.