EIP-2026-111105

This Ruby script exploits a SQL injection vulnerability in PHPKit 1.6.1 R2 by injecting crafted SQL queries into the 'letter' parameter of the 'overview.php' file. It extracts user credentials (ID, username, password, email, and status) by leveraging UNION-based SQL injection.