EIP-2026-110776

The exploit demonstrates SQL injection and XSS vulnerabilities in PHP TopSites 2.1 by providing crafted URIs that extract user credentials and execute arbitrary JavaScript. The SQLi example uses UNION-based injection to dump email and password data, while the XSS example injects a script tag.