EIP-2026-111564

This exploit demonstrates an error-based SQL injection vulnerability in PSNews Website 1.0.0 via the 'keywords' POST parameter in the search functionality. The payload leverages MySQL's updatexml function to trigger an XPath error, exposing user and database information.