EIP-2026-112193

The exploit demonstrates SQL injection and local file inclusion vulnerabilities in Sitemax Maestro 2.0. The SQLi payload extracts user credentials from the database, while the LFI payload attempts to read arbitrary files.