EIP-2026-111104

This exploit targets an SQL injection vulnerability in PHPKit 1.6.1 and prior versions. It sends a crafted POST request to extract user password hashes from the database by manipulating the 'search_user' parameter.