EIP-2026-111588

This Perl script exploits a SQL injection vulnerability in PunBB Automatic Image Upload <= v1.3.5 by leveraging an unauthenticated UNION-based SQLi to extract user credentials (username, password, email) from the database. It requires prior authentication and a specific configuration in 'uploadimg_config.php' to be effective.