EIP-2026-112140

This is a writeup describing a SQL injection vulnerability in a Simple Shopping Cart Application. The vulnerability arises from improper sanitization of the 'prodid' parameter in product-details.php, allowing attackers to inject malicious SQL queries.