EIP-2026-110819

The exploit demonstrates a SQL injection vulnerability in PHP-Fusion Mod the_kroax via the 'comment_id' parameter. It uses a UNION-based attack to extract user credentials (user_name and user_password) from the 'fusion_users' table.