EIP-2026-111946

The provided text describes an SQL injection vulnerability in ScriptCase, where user-supplied input via the 'categoria' parameter in 'scelta_categoria.php' is not properly sanitized. This allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.