EIP-2026-110888

The provided text describes a remote SQL injection vulnerability in the MS-Analysis module, where unsanitized HTTP header input can be used to manipulate SQL queries. The example demonstrates a time-based blind SQL injection to disclose the administrator password hash.