EIP-2026-110716

This is a functional SQL injection exploit for PHP Link Directory software, demonstrating unauthenticated extraction of admin credentials via a crafted `sbcat_id` parameter in `showcats.php`. The PoC uses a UNION-based attack to dump usernames and passwords from the `sblnk_admin` table.