EIP-2026-111106

This exploit targets a SQL injection vulnerability in PHPKit 1.6.1's popup.php file. It extracts user password hashes from the database by manipulating the search_user parameter in a UNION-based SQLi attack.