EIP-2026-110550

This exploit demonstrates a SQL injection vulnerability in Persia BME E-Catalogue's search.aspx page via the 'q' parameter, allowing an attacker to extract plaintext user credentials from the database.