EIP-2026-110821

This is a writeup describing a SQL injection vulnerability in PHP-Fusion Mod vArcade 1.8. The vulnerability allows an attacker to extract user credentials via a crafted SQL query in the 'comment_id' parameter.