EIP-2026-111107

The exploit demonstrates an SQL injection vulnerability in PHPKIT's 'b-day.php' addon via the 'ausgabe' parameter. The crafted URL injects a UNION-based SQL query to extract user credentials from the 'phpkit_user' table.