EIP-2026-111585

This is a writeup describing a SQL injection vulnerability in PunBB's profile.php script, allowing an attacker to gain administrative privileges by manipulating the group_id parameter. The provided injection example demonstrates how to exploit the vulnerability.