EIP-2026-111191

The exploit demonstrates an SQL injection vulnerability in phpRS by injecting a UNION-based query to extract user credentials from the 'mac_user' table. The payload is appended to the 'id' parameter in the URL, bypassing input sanitization.