EIP-2026-111627

This exploit demonstrates a SQL injection vulnerability in QualDev eCommerce script, allowing an attacker to extract admin credentials via a crafted UNION-based SQL query. The PoC targets the 'id' parameter in the 'index.php' file to dump email and password hashes from the admin table.