EIP-2026-111455

This exploit demonstrates a SQL injection vulnerability in PowieSys <= 0.7.7 alpha, specifically in the 'shownews' parameter of index.php. The PoC extracts user credentials (nickname, password hash, and email) from the 'powie_pfuser' table.