EIP-2026-111240

This exploit demonstrates a blind SQL injection vulnerability in PhpWebGallery 1.3.4. The PoC shows how an attacker can inject SQL queries via the 'cat' and 'image_id' parameters to extract database information, such as the version.