EIP-2026-110764

This exploit demonstrates an SQL injection vulnerability in PHP State by injecting a UNION-based query to extract database information such as user, database name, version, and OS. The payload is appended to the 'id' parameter in the URL.