EIP-2026-110713

This exploit demonstrates a SQL injection vulnerability in PHP Krazy Image Host Script 1.01. The vulnerability allows an attacker to extract user credentials from the database via a crafted UNION-based SQL injection in the 'id' parameter of viewer.php.