EIP-2026-111175

This PHP script exploits a SQL injection vulnerability in PHPNet <= 1.8 via the 'ler.php' file, allowing an attacker to extract MySQL user credentials and other sensitive information. It also documents additional vulnerabilities such as login bypass, arbitrary file upload, and XSS.