EIP-2026-110807

This exploit demonstrates a SQL injection vulnerability in PHP-Fusion's downloads.php file, allowing an attacker to extract user credentials via a crafted page_id parameter. The payload uses a UNION-based SQLi to retrieve user_name and user_password from the database.