EIP-2026-110903

This exploit demonstrates a SQL injection vulnerability in PHP-SecureArea <= v2.7 via the 'item_number' parameter in the IPN processing script. The PoC uses a UNION-based SQLi to extract data, leveraging lack of input sanitization.