EIP-2026-111829

This exploit demonstrates a SQL injection vulnerability in Runcms <= 1.6.1 by injecting malicious SQL into the 'msg_image' parameter, which is improperly sanitized in the 'store()' function. The exploit sends a crafted message to extract user credentials from the database.